BigCo – cross-team co-ordination

Mark begins, “Thanks to all the leaders from the networking, infosec, and security ops teams for being able to make it to this meeting. You’ve probably already heard that BigCo is the victim of a ransomware attack. Currently, headquarters and three of the five major data centers are down. Our human resources data and much of our critical PII data for both employees and customers have been encrypted. We do have mostly good backups and, of course, we have backups at our disaster recovery site in case any online backups have been encrypted. There were also some online backups that were encrypted. To avoid this from happening, backups need to be offline or done intermittently since online mapped drives will also be encrypted by ransomware. Whether it is a USB drive or a cloud drive, any online connected drives will be encrypted by ransomware.” Megan says, “I’m glad we invested in that disaster recovery as a service...