{"id":2884,"date":"2023-04-13T03:52:59","date_gmt":"2023-04-13T03:52:59","guid":{"rendered":"https:\/\/www.oztera.com\/?p=2884"},"modified":"2023-04-13T03:52:59","modified_gmt":"2023-04-13T03:52:59","slug":"best-practices-for-ransomware-protection","status":"publish","type":"post","link":"https:\/\/www.oztera.com\/best-practices-for-ransomware-protection\/","title":{"rendered":"Best Practices for Ransomware Protection"},"content":{"rendered":"<p>Defending against ransomware requires more than just implementing detection and response measures.<\/p>\n<p>It\u2019s important to understand that \u201cprotection\u201d is more than prevention. It\u2019s about:<\/p>\n<ul>\n<li>Investing in the detection capabilities that allow you to stop attacks as they\u2019re happening<\/li>\n<li>Creating business continuity plans for different scenarios and running those plays until they become second nature<\/li>\n<li>Containing the threat and restoring data backups so you can keep the business running<\/li>\n<\/ul>\n<p>The goal is to turn your network into an impenetrable fortress \u2013 building resilience through end-to-end protection, a cyber-aware culture, and micro-segmented architecture that simply isn\u2019t that attractive to would-be attackers.<\/p>\n<p>Overall your ransomware protection strategy must defend your business on all fronts. With that in mind, here are six ransomware protection best practices for reducing your cyber risk.<\/p>\n<h6><strong>Establish End\u2013to-End Visibility Across Your Entire Network<\/strong><\/h6>\n<p>Like so many digital strategies,\u00a0<a href=\"https:\/\/www.microsoft.com\/en-us\/security\/business\/zero-trust\"><strong>implementing Zero Trust best practices<\/strong><\/a>\u00a0starts with end-to-end visibility \u2013 you can\u2019t protect what you can\u2019t see.<\/p>\n<p>Here, your goal is\u00a0<a href=\"https:\/\/securityscorecard.com\/blog\/the-key-to-risk-intelligence-visibility\"><strong>establishing a clear picture of your entire digital footprint<\/strong><\/a>\u00a0and filling any obvious gaps that could put your organization at risk.<\/p>\n<ul>\n<li><strong>Conduct an initial assessment.<\/strong>Once you\u2019ve mapped out your entire estate, you\u2019ll want to perform an initial assessment to determine where your security posture stands right now. Today\u2019s digital organizations, that increasingly enable work-from-anywhere and utilize cloud services, open up a greater range of possible entry points for ransomware campaigns. The entirety of your attack surface must be mapped out and have security controls enabled across every endpoint, device, application, workload, user, etc. connected to your network. It\u2019s about creating an airtight defense that keeps threat actors from entering the system. You want to be able to look at the entire estate and immediately know exactly which assets and data sets are most valuable to attackers. What vulnerabilities might they exploit to gain access to your system? Once a threat actor has infiltrated your system, what paths might they take during the lateral movement phase?<\/li>\n<li><strong>Identify data &amp; assets.<\/strong><a href=\"https:\/\/www.microsoft.com\/security\/blog\/2020\/12\/17\/becoming-resilient-by-understanding-cybersecurity-risks-part-2\/\"><strong>Microsoft experts<\/strong><\/a>\u00a0advise organizations to identify critical business assets, data, and processes. They also emphasize that it\u2019s important to confirm the appropriate team members truly understand where they \u201clive\u201d and how to keep them safe, so that proper controls can be implemented to protect and rapidly restore them.<\/li>\n<li><strong>Uncover and address blind spots &amp; gaps.<\/strong>From there, start\u00a0<a href=\"https:\/\/techcommunity.microsoft.com\/t5\/security-compliance-and-identity\/uncover-your-blind-spots-seamlessly-control-cloud-usage-risks-to\/ba-p\/2157447\"><strong>identifying blind spots<\/strong><\/a>\u00a0and gaps that could put your organization at risk. Think \u2013 cloud usage and shadow IT. You\u2019ll want to make sure that you have full coverage across all security layers: endpoints, apps, identities, infrastructure, etc. Your goal is comprehensive protection. Use anti-virus and anti-malware software and implement security policies that prevent known payloads from launching.\u00a0<a href=\"https:\/\/www.microsoft.com\/en-us\/security\/business\/threat-protection\"><strong>Implement XDR and SIEM solutions<\/strong><\/a>\u00a0to stay on top of emerging threats and unusual activity. You get the idea.<\/li>\n<\/ul>\n<h6><strong>Harden Your Security Posture<\/strong><\/h6>\n<p>Once you\u2019ve gotten the lay of the land, torn down security silos, and flagged critical blind spots and gaps, it\u2019s time to start hardening your security posture. While this isn\u2019t a comprehensive list, here are some of the most important things you can do to strengthen your defenses:<\/p>\n<ul>\n<li><strong>Keep up with patching &amp; updates.<\/strong>In 2019,\u00a0<a href=\"https:\/\/securityboulevard.com\/2019\/10\/60-of-breaches-in-2019-involved-unpatched-vulnerabilities\/\"><strong>an estimated 60% of data breaches<\/strong><\/a>\u00a0involved unpatched vulnerabilities. Staying on top of patches and software upgrades is another one of those simple prevention methods that can go a long way in keeping your organization safe from ransomware and other threats. But, as\u00a0<a href=\"https:\/\/www.cpomagazine.com\/cyber-security\/cybersecurity-improvements-may-be-the-best-customer-experience-tool-youre-not-using\/\"><strong>CPO Magazine points out<\/strong><\/a>, keeping up with patching and updates requires orgs to balance the need for robust security protections with the need to minimize business disruptions, and the need to ensure IT staff is focused on high-impact work. As such, your best bet is automating updates, as well as choosing software that automatically delivers updates without requiring IT to manually take action.<\/li>\n<li><strong>Eliminate configuration errors.<\/strong>According to a\u00a0<a href=\"https:\/\/go.crowdstrike.com\/rs\/281-OBQ-266\/images\/eBookProtectorsoftheCloudEng.pdf\"><strong>recent Crowdstrike report<\/strong><\/a>, the most common cause of cloud-based ransomware attacks, breaches, and other intrusions is poor configuration. See, when parts of your infrastructure are no longer receiving routine maintenance or security updates, solutions like SIEM, XDR, monitoring, and so on can\u2019t protect those environments. Many of these issues stem from errors made during basic admin tasks. So, you\u2019ll want to set up infrastructure with default patterns that make it easy to set up and manage accounts, security groups, roles, etc.<\/li>\n<li><strong>Segment your network.<\/strong>Another thing you can do to limit the scope of damage is break your network into smaller sub-networks, or\u00a0<a href=\"https:\/\/www.paloaltonetworks.com\/cyberpedia\/what-is-network-segmentation\"><strong>segments<\/strong><\/a>. This allows admins to apply granular controls and policies to specific parts of the network. Admins gain more visibility into data flows, usage, and can identify and act on vulnerabilities\/incidents faster. It also prevents threat actors from moving laterally through the system.<\/li>\n<\/ul>\n<h6><strong>Make Identity and Access Management a Priority<\/strong><\/h6>\n<p>According to a\u00a0<a href=\"https:\/\/query.prod.cms.rt.microsoft.com\/cms\/api\/am\/binary\/RWUGFg\"><strong>recent Microsoft report<\/strong><\/a>, identity has become one of the most important lines of defense against ransomware. From a protection perspective, preventing ID abuse is critical. It\u2019s also the first place you\u2019ll want to investigate in the event of a security incident.<\/p>\n<p>A few things you can do to prevent ransomware from entering your system:<\/p>\n<ul>\n<li><strong>Implement Multi-Factor Authentication (MFA).<\/strong><a href=\"https:\/\/www.microsoft.com\/en-us\/security\/business\/security-insider\/cyber-signals-1\/summary-issue1\/?culture=en-us&amp;country=US\"><strong>Microsoft estimates<\/strong><\/a>\u00a0that basic protections like SSO and MFA are effective in blocking close to 99% of attacks. Now, while that sounds some sort of silver bullet, only about 20% of businesses fully implement said protections. Meaning, most ransomware attacks could have been stopped if identity and access management (IAM) was a priority from the get-go; this is the first line of defense against ransomware.<\/li>\n<li><strong>Use the least privilege principle &amp; right-sized access.<\/strong>Make sure you restrict access permissions, deny access to unauthorized devices, and block app installations from standard users. Solutions like\u00a0<a href=\"https:\/\/query.prod.cms.rt.microsoft.com\/cms\/api\/am\/binary\/RE4XVMS?culture=en-us&amp;country=US\"><strong>Entra Verified ID<\/strong><\/a>,\u00a0<a href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/active-directory\/fundamentals\/active-directory-whatis\"><strong>Azure AD<\/strong><\/a>, and\u00a0<a href=\"https:\/\/www.microsoft.com\/en-us\/security\/business\/identity-access\/microsoft-entra-permissions-management\"><strong>Entra Permissions Management<\/strong><\/a>. make it easier to verify credentials, automate provisioning, and monitor usage.<\/li>\n<li><strong>Secure admin paths.<\/strong>Attackers often exploit weaknesses in privileged access security during targeted attacks. The benefit is, threat actors can get into the system via privileged accounts or workstations and quickly gain access to critical business assets.\u00a0<a href=\"https:\/\/docs.microsoft.com\/en-us\/security\/compass\/overview\"><strong>Securing privileged access<\/strong><\/a>\u00a0seals off unauthorized pathways, makes it easier to monitor access and usage and better protect against targeted data theft.<\/li>\n<li><strong>Make things easy on end-users.<\/strong>You\u2019ll also want to make it easy for users to follow best practices. Implementing\u00a0SSO, password-less sign-in, secure collaboration tools, etc. makes it convenient for all users to access the data, docs, and apps they need to do their work. What\u2019s more, it also prevents them from seeking out unauthorized solutions that introduce risks to your network.<\/li>\n<\/ul>\n<h6><strong>Always Back Up Your Files<\/strong><\/h6>\n<p>Backing up all files and maintaining copies of those backups in a secure, separate location is one of the most important things you can do to prevent your data from being stolen, encrypted, and held for ransom. A few things to keep in mind as you put together your backup strategy:<\/p>\n<ul>\n<li><strong>Avoid long backup cycles.<\/strong>Data backups should be performed on a routine basis \u2014 though not all data sets will need to be backed up on the same schedule.<\/li>\n<li><strong>Follow the \u201c3-2-1-1 backup rule.\u201d<\/strong>The 3-2-1-1 rule breaks down as follows: you\u2019ll keep three or more copies of your data in different locations, use two different storage mediums, store one copy off-site (different cloud or external hard drive), and store one or more immutable copies using an indelible storage method. This approach may seem a bit excessive, but it ensures that a vulnerability in one backup won\u2019t compromise the other copies. This makes it easier to bounce back from an attack and limits the amount of damage it can cause. You can wipe the device and reinstall a copy of the backup.<\/li>\n<li><strong>Clearly document backup policies &amp; procedures.<\/strong>Make sure that backup policies are clearly defined, documented, and communicated to the team. Documentation should include things like strategies, goals, processes, tools, individual responsibilities, retention schedules, backup timing, etc.<\/li>\n<li><strong>Perform regular testing.<\/strong>Finally, it\u2019s important that you perform regular tests to ensure that your backups haven\u2019t been compromised. Again, frequency depends on several factors: data volume, assets, etc.<\/li>\n<\/ul>\n<h6><strong>Educate and Train Your Team<\/strong><\/h6>\n<p>Employees can be your greatest risk or your best line of defense when it comes to ransomware attacks. Poorly-trained employees can undermine even the most sophisticated protections. All it takes is one person downloading an infected file or clicking a malicious link and, just like that, bad actors gain access to your network.<\/p>\n<p>The good news is arming your team with some basic skills is one of the best (and easiest) ways to defend your business from ransomware attacks.<\/p>\n<p>Ad-hoc cyber security training won\u2019t cut it.\u00a0<a href=\"https:\/\/emtemp.gcom.cloud\/ngw\/globalassets\/en\/publications\/documents\/3-steps-to-stop-employees-taking-cyber-bait.pdf\"><strong>Gartner recommends<\/strong><\/a>\u00a0building an adaptive, ongoing program that connects cyber education and awareness programs to business outcomes \u2014 just like any other business strategy.<\/p>\n<p>Here\u2019s a look at what that might entail:<\/p>\n<ul>\n<li><strong>Basic cyber hygiene.<\/strong>Initially, your goal is showing employees how individual actions are directly linked to protecting the organization and its customers from ransomware. Educate employees about current threats \u2014 ransomware gangs, recent breaches,\u00a0<a href=\"https:\/\/www.agcs.allianz.com\/news-and-insights\/news\/allianz-risk-barometer-2022-press.html\">business interruption vulnerabilities<\/a>, etc.<\/li>\n<li><strong>How to ID phishing attempts<\/strong>.<a href=\"https:\/\/www.forbes.com\/advisor\/business\/training-employees-about-ransomware\/\">Train employees how to spot phishing emails<\/a>, texts, social media messages, apps, and websites. Small things like looking at grammar usage, salutations (i.e.: Dear Sir\/Madam), and sender emails (i.e.: bankofamerica@gmail.com) or hovering over links for more info before clicking can go a long way in preventing<\/li>\n<li><strong>Best practices around BYOD, remote access, and removable media use<\/strong>.Remote-hybrid work has increased the threat of ransomware \u2014 with more threat actors capitalizing on unsecured personal devices, Remote Desktop and VPN vulnerabilities, and things like USB devices. It\u2019s important that your training efforts focus on ensuring that employees are aware of the risks that come with their devices and what they can do to stay safe.<\/li>\n<li><strong>How to report &amp; respond to known threats.\u00a0<\/strong>Another critical element in any ransomware training program is reporting and responding to cyber incidents. Make sure you teach employees what they should do if they receive a suspicious email or link \u2014 who they should report it to, how to forward that information, etc. Your strategy should also include guidance for what people need to do if they make a mistake (otherwise, they may try to cover it up out of fear they\u2019ll be punished).<\/li>\n<\/ul>\n<h6><strong>Develop Your Ransomware Response Plan (or Several)<\/strong><\/h6>\n<p>While prevention is the best medicine, there\u2019s no way to guarantee that you won\u2019t fall victim to ransomware at one point or another. As such, our last \u201cransomware protection best practice,\u201d looks beyond prevention and focuses instead on preparation.<\/p>\n<p>Bridget Quinn Choi, Principal at Booz Allen Hamilton,\u00a0<a href=\"https:\/\/www.protocol.com\/braintrust\/ransomware-lessons-for-executives-cybersecurity?rebelltitem=14#rebelltitem14\"><strong>told Protocol<\/strong><\/a>\u00a0that organizations often have ransomware recovery plans in place, but there are lots of gaps when it comes to response times and achieving business continuity post-disaster. She says that many times, these gaps are driven by unclear objectives, a lack of testing, and a poor understanding of what\u2019s expected in an incident response.<\/p>\n<p>After COVID and everything we\u2019ve seen since those initial lockdowns, the only thing we can count on is more uncertainty. Putting together\u00a0<a href=\"https:\/\/www.crowdstrike.com\/cybersecurity-101\/ransomware\/how-to-prevent-ransomware\/\"><strong>incident response plans<\/strong><\/a>\u00a0for different scenarios (i.e. data breaches, compromised backups, stolen credentials) can facilitate smart decision-making and quick action when disaster strikes \u2013 no matter what kind of disaster is on the horizon.<\/p>\n<p>At a bare minimum, you\u2019ll want to cover business continuity, data protection, and how to respond to a ransomware attack. But \u2013 it\u2019s worth noting that cyber incidents come in many different \u201cflavors\u201d and you\u2019ll want to consider those nuances as you develop a response plan. Like, how will you:<\/p>\n<ul>\n<li>Respond to ransom demands?<\/li>\n<li>Report incidents to law enforcement?<\/li>\n<li>Inform customers that there\u2019s been a breach?<\/li>\n<li>Check backups and critical systems for infection?<\/li>\n<li>Quarantine infected systems and files?<\/li>\n<li>Get up and running?<\/li>\n<\/ul>\n<p>Your incident response plan will be informed by your business model, strategy, and the regulations that dictate how these things are done within your industry. But \u2013 you\u2019ll want to make sure that you clearly define and document your game plan, communicate it to key employees, and run routine stress tests to ensure that you\u2019re ready to fend off threat actors of all stripes \u2013 sophisticated gangs, commodity attackers, or something in-between.<\/p>\n<h6><strong>Final Thoughts<\/strong><\/h6>\n<p>Look, the best way to avoid becoming a ransomware victim is to be proactive about prevention \u2013 but there\u2019s always a possibility that ransomware will find its way inside your network \u2013 even if you\u2019ve done everything right. Oztera can help you get started on your ransomware defense journey. Take this\u00a0<a href=\"https:\/\/www.microsoft.com\/en-us\/security\/business\/threat-protection\/security-operations-assessment?activetab=solution-wizard:primaryr2\"><strong>quick Microsoft security assessment<\/strong><\/a>\u00a0to identify gaps in your security posture, and we\u2019ll go from there. You can also\u00a0<strong><u><a href=\"mailto:info@oztera.com\">contact us<\/a><\/u><\/strong> to learn more about our services, expertise, and what it\u2019s like to work with us. Celebrating over two decades and counting with a greater than 90% retentionrate.\u00a0 Move to the Cloud with confidence with the right Partner!<\/p>\n<p style=\"text-align: center;\"><strong><a href=\"http:\/\/www.oztera.com\">oztera.com<\/a> | (866) 282-2858 | <a href=\"mailto:info@oztera.com\">info@oztera.com<\/a><\/strong><\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Defending against ransomware requires more than just implementing detection and response measures. It\u2019s important to understand that \u201cprotection\u201d is more than prevention. It\u2019s about: Investing in the detection capabilities that allow you to stop attacks as they\u2019re happening Creating business continuity plans for different scenarios and running those plays until they become second nature Containing [&hellip;]<\/p>\n","protected":false},"author":6,"featured_media":2885,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":""},"categories":[1],"tags":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v17.0 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Best Practices for Ransomware Protection - Oztera<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.oztera.com\/best-practices-for-ransomware-protection\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Best Practices for Ransomware Protection - Oztera\" \/>\n<meta property=\"og:description\" content=\"Defending against ransomware requires more than just implementing detection and response measures. It\u2019s important to understand that \u201cprotection\u201d is more than prevention. It\u2019s about: Investing in the detection capabilities that allow you to stop attacks as they\u2019re happening Creating business continuity plans for different scenarios and running those plays until they become second nature Containing [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.oztera.com\/best-practices-for-ransomware-protection\/\" \/>\n<meta property=\"og:site_name\" content=\"Oztera\" \/>\n<meta property=\"article:published_time\" content=\"2023-04-13T03:52:59+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.oztera.com\/wp-content\/uploads\/2023\/04\/markus-spiske-FXFz-sW0uwo-unsplash-scaled.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1707\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Paul Mosso\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"10 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.oztera.com\/#organization\",\"name\":\"Oztera\",\"url\":\"https:\/\/www.oztera.com\/\",\"sameAs\":[],\"logo\":{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/www.oztera.com\/#logo\",\"inLanguage\":\"en-US\",\"url\":\"https:\/\/www.oztera.com\/wp-content\/uploads\/2020\/12\/logo.png\",\"contentUrl\":\"https:\/\/www.oztera.com\/wp-content\/uploads\/2020\/12\/logo.png\",\"width\":184,\"height\":36,\"caption\":\"Oztera\"},\"image\":{\"@id\":\"https:\/\/www.oztera.com\/#logo\"}},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.oztera.com\/#website\",\"url\":\"https:\/\/www.oztera.com\/\",\"name\":\"Oztera\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/www.oztera.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.oztera.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/www.oztera.com\/best-practices-for-ransomware-protection\/#primaryimage\",\"inLanguage\":\"en-US\",\"url\":\"https:\/\/www.oztera.com\/wp-content\/uploads\/2023\/04\/markus-spiske-FXFz-sW0uwo-unsplash-scaled.jpg\",\"contentUrl\":\"https:\/\/www.oztera.com\/wp-content\/uploads\/2023\/04\/markus-spiske-FXFz-sW0uwo-unsplash-scaled.jpg\",\"width\":2560,\"height\":1707},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.oztera.com\/best-practices-for-ransomware-protection\/#webpage\",\"url\":\"https:\/\/www.oztera.com\/best-practices-for-ransomware-protection\/\",\"name\":\"Best Practices for Ransomware Protection - Oztera\",\"isPartOf\":{\"@id\":\"https:\/\/www.oztera.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.oztera.com\/best-practices-for-ransomware-protection\/#primaryimage\"},\"datePublished\":\"2023-04-13T03:52:59+00:00\",\"dateModified\":\"2023-04-13T03:52:59+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.oztera.com\/best-practices-for-ransomware-protection\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.oztera.com\/best-practices-for-ransomware-protection\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.oztera.com\/best-practices-for-ransomware-protection\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.oztera.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Best Practices for Ransomware Protection\"}]},{\"@type\":\"Article\",\"@id\":\"https:\/\/www.oztera.com\/best-practices-for-ransomware-protection\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.oztera.com\/best-practices-for-ransomware-protection\/#webpage\"},\"author\":{\"@id\":\"https:\/\/www.oztera.com\/#\/schema\/person\/4a0ce8bc472aa6ec6a76696ade51bd64\"},\"headline\":\"Best Practices for Ransomware Protection\",\"datePublished\":\"2023-04-13T03:52:59+00:00\",\"dateModified\":\"2023-04-13T03:52:59+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.oztera.com\/best-practices-for-ransomware-protection\/#webpage\"},\"wordCount\":2179,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.oztera.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.oztera.com\/best-practices-for-ransomware-protection\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.oztera.com\/wp-content\/uploads\/2023\/04\/markus-spiske-FXFz-sW0uwo-unsplash-scaled.jpg\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.oztera.com\/best-practices-for-ransomware-protection\/#respond\"]}]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.oztera.com\/#\/schema\/person\/4a0ce8bc472aa6ec6a76696ade51bd64\",\"name\":\"Paul Mosso\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/www.oztera.com\/#personlogo\",\"inLanguage\":\"en-US\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/446fea7b7e639cb91f49a003a53ab435?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/446fea7b7e639cb91f49a003a53ab435?s=96&d=mm&r=g\",\"caption\":\"Paul Mosso\"},\"sameAs\":[\"http:\/\/www.oztera.com\"],\"url\":\"https:\/\/www.oztera.com\/author\/paul-mossooztera-com\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Best Practices for Ransomware Protection - Oztera","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.oztera.com\/best-practices-for-ransomware-protection\/","og_locale":"en_US","og_type":"article","og_title":"Best Practices for Ransomware Protection - Oztera","og_description":"Defending against ransomware requires more than just implementing detection and response measures. It\u2019s important to understand that \u201cprotection\u201d is more than prevention. It\u2019s about: Investing in the detection capabilities that allow you to stop attacks as they\u2019re happening Creating business continuity plans for different scenarios and running those plays until they become second nature Containing [&hellip;]","og_url":"https:\/\/www.oztera.com\/best-practices-for-ransomware-protection\/","og_site_name":"Oztera","article_published_time":"2023-04-13T03:52:59+00:00","og_image":[{"width":2560,"height":1707,"url":"https:\/\/www.oztera.com\/wp-content\/uploads\/2023\/04\/markus-spiske-FXFz-sW0uwo-unsplash-scaled.jpg","path":"\/home\/892769.cloudwaysapps.com\/rnhrxepjzv\/public_html\/wp-content\/uploads\/2023\/04\/markus-spiske-FXFz-sW0uwo-unsplash-scaled.jpg","size":"full","id":2885,"alt":"","pixels":4369920,"type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Written by":"Paul Mosso","Est. reading time":"10 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Organization","@id":"https:\/\/www.oztera.com\/#organization","name":"Oztera","url":"https:\/\/www.oztera.com\/","sameAs":[],"logo":{"@type":"ImageObject","@id":"https:\/\/www.oztera.com\/#logo","inLanguage":"en-US","url":"https:\/\/www.oztera.com\/wp-content\/uploads\/2020\/12\/logo.png","contentUrl":"https:\/\/www.oztera.com\/wp-content\/uploads\/2020\/12\/logo.png","width":184,"height":36,"caption":"Oztera"},"image":{"@id":"https:\/\/www.oztera.com\/#logo"}},{"@type":"WebSite","@id":"https:\/\/www.oztera.com\/#website","url":"https:\/\/www.oztera.com\/","name":"Oztera","description":"","publisher":{"@id":"https:\/\/www.oztera.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.oztera.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"ImageObject","@id":"https:\/\/www.oztera.com\/best-practices-for-ransomware-protection\/#primaryimage","inLanguage":"en-US","url":"https:\/\/www.oztera.com\/wp-content\/uploads\/2023\/04\/markus-spiske-FXFz-sW0uwo-unsplash-scaled.jpg","contentUrl":"https:\/\/www.oztera.com\/wp-content\/uploads\/2023\/04\/markus-spiske-FXFz-sW0uwo-unsplash-scaled.jpg","width":2560,"height":1707},{"@type":"WebPage","@id":"https:\/\/www.oztera.com\/best-practices-for-ransomware-protection\/#webpage","url":"https:\/\/www.oztera.com\/best-practices-for-ransomware-protection\/","name":"Best Practices for Ransomware Protection - Oztera","isPartOf":{"@id":"https:\/\/www.oztera.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.oztera.com\/best-practices-for-ransomware-protection\/#primaryimage"},"datePublished":"2023-04-13T03:52:59+00:00","dateModified":"2023-04-13T03:52:59+00:00","breadcrumb":{"@id":"https:\/\/www.oztera.com\/best-practices-for-ransomware-protection\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.oztera.com\/best-practices-for-ransomware-protection\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.oztera.com\/best-practices-for-ransomware-protection\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.oztera.com\/"},{"@type":"ListItem","position":2,"name":"Best Practices for Ransomware Protection"}]},{"@type":"Article","@id":"https:\/\/www.oztera.com\/best-practices-for-ransomware-protection\/#article","isPartOf":{"@id":"https:\/\/www.oztera.com\/best-practices-for-ransomware-protection\/#webpage"},"author":{"@id":"https:\/\/www.oztera.com\/#\/schema\/person\/4a0ce8bc472aa6ec6a76696ade51bd64"},"headline":"Best Practices for Ransomware Protection","datePublished":"2023-04-13T03:52:59+00:00","dateModified":"2023-04-13T03:52:59+00:00","mainEntityOfPage":{"@id":"https:\/\/www.oztera.com\/best-practices-for-ransomware-protection\/#webpage"},"wordCount":2179,"commentCount":0,"publisher":{"@id":"https:\/\/www.oztera.com\/#organization"},"image":{"@id":"https:\/\/www.oztera.com\/best-practices-for-ransomware-protection\/#primaryimage"},"thumbnailUrl":"https:\/\/www.oztera.com\/wp-content\/uploads\/2023\/04\/markus-spiske-FXFz-sW0uwo-unsplash-scaled.jpg","inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.oztera.com\/best-practices-for-ransomware-protection\/#respond"]}]},{"@type":"Person","@id":"https:\/\/www.oztera.com\/#\/schema\/person\/4a0ce8bc472aa6ec6a76696ade51bd64","name":"Paul Mosso","image":{"@type":"ImageObject","@id":"https:\/\/www.oztera.com\/#personlogo","inLanguage":"en-US","url":"https:\/\/secure.gravatar.com\/avatar\/446fea7b7e639cb91f49a003a53ab435?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/446fea7b7e639cb91f49a003a53ab435?s=96&d=mm&r=g","caption":"Paul Mosso"},"sameAs":["http:\/\/www.oztera.com"],"url":"https:\/\/www.oztera.com\/author\/paul-mossooztera-com\/"}]}},"_links":{"self":[{"href":"https:\/\/www.oztera.com\/wp-json\/wp\/v2\/posts\/2884"}],"collection":[{"href":"https:\/\/www.oztera.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.oztera.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.oztera.com\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/www.oztera.com\/wp-json\/wp\/v2\/comments?post=2884"}],"version-history":[{"count":2,"href":"https:\/\/www.oztera.com\/wp-json\/wp\/v2\/posts\/2884\/revisions"}],"predecessor-version":[{"id":2887,"href":"https:\/\/www.oztera.com\/wp-json\/wp\/v2\/posts\/2884\/revisions\/2887"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.oztera.com\/wp-json\/wp\/v2\/media\/2885"}],"wp:attachment":[{"href":"https:\/\/www.oztera.com\/wp-json\/wp\/v2\/media?parent=2884"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.oztera.com\/wp-json\/wp\/v2\/categories?post=2884"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.oztera.com\/wp-json\/wp\/v2\/tags?post=2884"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}