What strategies are you currently using to minimize ransomware risks at your organization?

Security & GRCData Privacy & Protection

We've adopted a zero trust security approach.32%

Network segmentation / Air gapping networks45%

Implementing a cybersecurity framework like MITRE ATT&CK or NIST46%

Creating reliable and accessible backups34%

All of the Above28%

Other (please share below!)

562 PARTICIPANTS
3.7k viewscircle icon1 Upvotecircle icon1 Comment
Sort by:
IT Manager in Construction2 years ago

I do agree with 2: Zero Trust Approach and Network segmentation but it is also important to have the resources properly segmented.
A well defined ACL for the shared repositories is mandatory.

Content you might like

Has anyone drafted an SOW for a cloud-based SIEM with setup, migration, and maintenance? I’m working on a FedRAMP-authorized SIEM SOW, migrating from on-prem Splunk, covering data, searches, alerts, dashboards, and models.  Scope includes Environment Setup:  Cloud provisioning, configuration, testing. Connectors/Parsers: Custom data source integration. Content Development: Rules, use cases, threat feeds. Performance Tuning: Query/index optimization. Runbooks: Operational procedures. Also required: 24x7 support, maintenance, lifecycle and application management, role-based training, and documentation.  Must comply with NIST SP 800-53, CJIS, and FedRAMP Moderate+. Goal: Secure, scalable SIEM for rapid deployment. I may be missing elements, so suggestions are welcome. Please share redacted SOWs or tips if possible.

How are you currently managing SIEM costs? Have you found effective ways to actually reduce storage costs for your SIEM?

Read More Comments

If you use an air-gapped backup solution, would you say there are drawbacks?

Slow recovery response times35%

Data availability is limited51%

Too expensive to scale effectively50%

Difficult to manage for widespread use34%

Prone to misconfiguration13%

No - There are no drawbacks6%

View Results

Which of the following security risks are you most concerned about affecting your organization?

Disruption via ransomware45%

Exploitation via phishing62%

Exfiltration of PII (Personally identifiable information)42%

Disruption via DDoS attacks29%

Disruption of a business-critical application25%

Other (comment below)

View Results

With AI adoption accelerating across enterprises, what do you view as the top information security challenge that leaders should address? How can CISOs, VPs and Director’s align governance, risk and security investments to enable AI innovation without creating new exposures?

Read More Comments
What strategies are you currently using to minimize ransomware risks at your organization? | Gartner Peer Community