Australia's government is considering a ban on ransomware payments — do you think that could be effective? Why or why not?

Security Strategy & RoadmapThreat Intelligence & Incident Response
4k viewscircle icon2 Upvotescircle icon19 Comments
Sort by:
VP of IT in Manufacturing2 years ago

Yes. It would be a good step but will not be effective in isolation. Not only the greed of the cyber criminals needs to be controlled but the implementation also needs to be effective.

Secondly the tracking mechanisms for the ransomware needs to be improved and successfully closed cases highlighted so that others have the confidence in the law enforcement.

Director of IT in Education2 years ago

I think it is a good thing to remove the incentive to cyber criminals. However, it also should be dealt with on a case by case basis, if a company cannot continue without accessing their data, then they might be out of business fast. A cost benefit analysis should be considered in certain cases.

Director of IT in Software3 years ago

I like this move and hope that other country will follow it. I am certain that it will be effective

Director, Strategic Security Initiatives in Software3 years ago

It's could be effective. 

VP of Information Security in Finance (non-banking)3 years ago

This will redirect attention to other segments or sectors. Good move.

Content you might like

Experts say a new hacking group that has emerged recently named BlackMatter is using techniques that are similar to the DarkSide group that successfully hacked the Colonial Pipeline Co. earlier this year. Do you think they're the same group?

Yes BlackMatter is DarkSide returning under a new name.50%

No, BlackMatter is a different group from DarkSide.32%

I don't know17%

View Results

Which is the more realistic and sensible approach to ransomware protection and mitigation?

Encrypting data so if we are hacked, the data can't be read or exploited39%

Multi-factor authentication and phishing awareness training is enough to stop attacks before they get in59%

Something else (comment below)1%

View Results

I’ve been digging into ways to strengthen Zero Trust on IBM i systems, especially as more orgs shift toward hybrid cloud. I’m curious, how are others approaching threat detection around shadow AI use and supplier exposure in these environments?

I wanted a point of view on migration from on-prem AD and SCCM to AAD and Intune. Would be great to have a perspective on, - Is there a real need since SCCM is still undersupport from Microsoft? - I understand that we can get rid of onprim AD Infrastructure and move on SaaS, but any other benefits we get by doing this?

Looking to benchmark. If you are in-process of pursuing the ISO 42001 or have obtained it, how have you measured the business value?