There is insurance for ransomware. Most companies I know, has bought it (surprisingly popular). I'm not surprised that the companies would be willing to pay
They hand it off to other companies that specialize in auditing and overseeing the hack resolvement. If their partner company decide, that it's worth paying. Then they pay.
If the partner company decides to try and negotiate, they can I guess... Hard to say, never saw how insurance plays out when a true hack occurs.
I doubt it would be of any use. Most companies underfinance IT and security, while CISO just writes "rules" on how things should be, instead of overseeing actual hardening.
CEOs on the other hand being financially or criminally responsible, may lead to something.
At least the EU NIS2 directive has the right idea about it
7 Comments
hitwright@lemmy.world · 2 pts · 134d
There is insurance for ransomware. Most companies I know, has bought it (surprisingly popular). I'm not surprised that the companies would be willing to pay
Corkyskog@sh.itjust.works · 1 pts · 134d
Do the insurance companies employ negotiators?
hitwright@lemmy.world · 2 pts · 134d
They hand it off to other companies that specialize in auditing and overseeing the hack resolvement. If their partner company decide, that it's worth paying. Then they pay.
If the partner company decides to try and negotiate, they can I guess... Hard to say, never saw how insurance plays out when a true hack occurs.
NigelFrobisher@aussie.zone · 2 pts · 133d
Given tech companies are downscaling and blackhat llms are now a thing, I clearly picked the wrong career path.
Cyber@feddit.uk · 1 pts · 134d
Companies should tie CISO contracts to ransomware payouts.
We'd instantly have better protection AND make it financially unviable for future attacks as the CISO's would have to pay out from their own wages.
hitwright@lemmy.world · 3 pts · 134d
I doubt it would be of any use. Most companies underfinance IT and security, while CISO just writes "rules" on how things should be, instead of overseeing actual hardening.
CEOs on the other hand being financially or criminally responsible, may lead to something.
At least the EU NIS2 directive has the right idea about it
Paragone@lemmy.world · 0 pts · 133d
In some countries, it is a criminal-offense to pay criminals, to provide profit to crime.
How selectively-peculiar that that law isn't being applied when people pay ransomwere-gangs..
Hmm...
_ /\ _