my tweets are severely limited by my lack of understanding of what I am doing.
Here's a thread of ransomware planning questions orgs should consider. Start with: if backups are disk to disk, who can tamper with backups?
-
If things went completely wrong due to some form of attack, who would carry the buck? Whoever that person is, their dept gets BIG say in sec
It doesn't matter - in my mind - the politics of who is supposed to do what, if it's critical to company surviving: it. gets. done.
