Prepare for ransomware
Short label: RANSOM
Meaning
Ransomware can encrypt files, interrupt work and involve stolen information used for extortion.
Why it matters
Recovery may require investigation, clean systems and usable backup copies.
What you can do
Keep restricted recovery copies, test restoration and practise the response plan. Record who decides about recovery and communication.
Services that can help
Device Shield can take configured protective actions. Sovereign Storage provides agreed backup-storage protections. Recovery and rollback capabilities depend on the actual setup.
Official reference — NIS2 Art. 21(2)(c)
2. The measures referred to in paragraph 1 shall be based on an all-hazards approach that aims to protect network and information systems and the physical environment of those systems from incidents, and shall include at least the following:
— Directive (EU) 2022/2555 (NIS2), Art. 21(2)
(c) business continuity, such as backup management and disaster recovery, and crisis management;
— Directive (EU) 2022/2555 (NIS2), Art. 21(2)(c)
You must be able to keep working and to come back after a disaster: backups that work, a recovery plan, and someone who knows what to do in a crisis.
Read the article on EUR-Lex → · Official text, quoted from the Official Journal of the EU
Acronyms used here: NIS2, GDPR, DORA, CRA
- NIS2 — Network and Information Systems Directive 2
- An EU cybersecurity directive with requirements for organisations covered by its scope.
- GDPR — General Data Protection Regulation
- The EU regulation on personal-data protection. RGPD is the French name and AVG the Dutch name.
- DORA — Digital Operational Resilience Act
- EU rules on digital operational resilience in the financial sector.
- CRA — Cyber Resilience Act
- EU cybersecurity rules for products with digital elements, including certain software and connected devices.