What should a board consider when dealing with a ransomware attack

Ransomware is existentially different to other forms of hacking and goes to the heart of a board’s governance and fiduciary role. What is the best defence to protect your organisation as much as possible?

There has been much in the media about ransomware attacks and whether new laws should give more guidance on how to deal with them. Our expert panel from the Australian Information Security Association (AISA) will guide us through the changing landscape and the director considerations of strategy, planning and legal and will cover:

• How should strategic board decisions influence and develop into a working tactical digital policy?
• What are the legalities of paying a ransom? Is it considered an ‘instrument of crime’ to facilitate future crimes?
• What are the other legal, ethical and operational decisions to consider in your preparation and scenario planning stage, such as do you have the mechanisms in place to quickly meet the ransom demands if you choose to?
• What is the best defence to protect your organisation as much as possible? This Includes the smart questions to ask on technology, threats, liability and ensuring an responsive disaster recovery plan.

Presenters

• Damien Manuel GAICD, Chair, Australian Information Security Association (AISA)
• EJ Wise, Principal, WiseLaw
• Nick Klein, Founder and Executive Director, Digital Forensics and Incident Response CyberCX

Sponsor