Posts

Showing posts from July, 2022

5 Steps To Prevent And Respond To Ransomware Attacks

Image
Ransomware attacks are a threat to businesses of all sizes, from large corporations to small businesses. Ransomware is a formidable opponent because it can often defeat its targets. The best defense against this kind of attack is to not only work to prevent it from succeeding but also have plans for recovering if it does succeed in encrypting your data. The five core components of a good plan for preventing and responding to ransomware attacks include: Identify: Start by doing a thorough evaluation of your assets, systems, data, people and capabilities. Your risk tolerance will vary depending on the organization you are working for, so consider risks to your organization and the specific impacts of different systems being rendered inoperable. Consider any regulations such as PCI DSS that apply to your situation. Protect: Create safeguards to prevent a cybersecurity incident that could impact critical services, business processes and your business itself. These safeguards should address...

How The New York Department of Financial Services Cybersecurity Regulation Works

Image
The New York Department of Financial Services released a set of regulations on February 16th, 2017. The Cybersecurity Regulation ( 23 NYCRR Part 500 ) places cybersecurity requirements on all covered financial institutions in the state. The rules were developed after two rounds of feedback from the industry and the public, outlining 23 sections that require covered institutions to measure their cybersecurity risks and build up plans to smartly address those risks. The New York Department of Financial Services’ Cybersecurity Regulation applies to all entities licensed or registered by the department, including banks and other financial firms. The New York Department of Financial Services (NYDFS) Cybersecurity Regulation has certain exemptions. If your organization has less than 10 employees, annual gross revenue of less than $5 million from New York operations in each of the past three years, and year-end total assets of less than $10 million, you are exempt from s...

What Are the Most Integral Components Of A Successful Disaster Recovery Plan?

Image
As companies are becoming more reliant on electronic data and technology for their everyday operations, the amount of data and information technology infrastructure lost to disasters seems to be escalating. Companies are appraised to lose profit and invite expenses every year because of unpreparedness, disasters, and lost production. Measures need to be in place to safeguard your company from disasters. One way your business can prepare and safeguard itself from the negative consequences of disasters is to form and execute a disaster recovery plan. The 4 most important elements of a successful disaster recovery plan include: Form a disaster recovery team: The Disaster Recovery Plan team will be responsible for developing, executing, and maintaining the DRP. The DRP should identify the team members, define their responsibilities, provide their contact information, identify who should be contacted in the event of a disaster or emergency, and make sure all emplo...