A South Korean web hosting service paid the largest ransomware demand ever in 2017, amounting to an astounding $1 million. A recent report by Quick Heal shows a 300% spike in ransomware attacks in 2017, with even more expected in 2018.
Another report by Telstra showed that 60% of Australian organizations have experienced at least one ransomware incident. Further, 57% of those organizations paid the ransom but one third were able to recover their files.
Despite these threats being well documented, many companies are not prepared for ransomware attacks, malware attacks, or even social engineered attacks like phishing. Most organizations that are targeted by ransomware end up giving in to the demands of those who take control of their systems because they do not have the right policies to protect and defend them, let alone proper data backup and recovery plans.
The General Data Protection Regulation (GDPR), which will come into force on 25th May, 2018, will help ensure that all data collected by organizations in the EU and those organizations collecting data from EU citizens implement certain precautionary measures to keep data from falling into the wrong hands.
Apart from employing a Data Protection Officer, it is also recommended that companies ensure that their cybersecurity strategy and policies are regularly updated. Cybersecurity professionals such as those listed below can help strengthen data protection strategies:
- Cybersecurity Engineers: Develop cybersecurity strategies and policies, implement plans and mitigate vulnerabilities, investigates breaches, and respond to security incidents.
- Cybersecurity Analysts: Find, analyze, and report on cybersecurity breach events that have occurred in the organization or events that might occur due to lack of strategic planning.
- Risk and Vulnerability Analysts: Provide cybersecurity risk analysis and assessments to ensure the security and the timely compliance with IT security and legal mandates and standards.
- Penetration Testers: Identify, exploit, and report vulnerabilities in a network that could result in access to data by a malicious attacker.
- Chief Information Security Officers: Develop and implement information security policies and procedures as well as many other executive-level job responsibilities.
As ransomware attacks are becoming more commonplace, another worrying trend is worsening: there are currently over one million unfilled cybersecurity jobs. How do we bridge this gap and create cybersecurity professionals to create and protect a safe cyberspace? The great news is that a degree from EC-Council University prepares students to become invaluable resources to the multitude of organizations that need data protectors. Earning your degree in cybersecurity will empower you to become an engaged problem solver with a keen understanding of the entire scope of cybersecurity and asset protection, giving you a better chance at a dream career in cybersecurity.