Ransomware – Not a single click away
Ransomware has become an increasing thread to companies. IT departments often suggest that clicking a link in a fishing mail can infect you and that it is the personal responsibility of each individual employee to not do that. I think this framing is flawed. There a many measures that an organization can and should implement that each will protect against “single click infections”. Manual checking of links should never be your only layer of defense and blaming individuals is just a cheap excuse.
It is unlikely that many companies implement all defenses proposed here, but I think it is important to keep in mind that we as an industry can and should do better. Ransomware attacks are – at least to a high degree – avoidable.