Ransomware - Protect and Recovery in nutsell

For any company it is critical to be able to access and provide access in a secure way to employee to its cloud resources: documents and apps.
At the same time, it should never happen that a unknown Sofware / Apps to run on any resource that can access in any way other resources: documents, emails etc.

Most of us know that a ransomware is a type of malicious software that is designed to encrypt the files on a victim's computer, making them inaccessible until a ransom is paid.

What damages that ransomware can do:

• Data loss
  It encrypts or delete important files, making them inaccessible or unusable.
• Financial loss
  Need data back then you must pay, it is costly, and there is no guarantee that paying the ransom will result in the recovery of the encrypted files.
• Business downtime
  It will disrupt business operations, causing downtime and loss of revenue.
• Reputation damage
  It can damage a company's reputation and lead to a loss of customer trust.
• Legal and regulatory compliance issues
  Will result in a violation of data protection laws and regulations, potentially leading to legal and financial penalties.
• Cybersecurity risk
  It will expose vulnerabilities in a company's cybersecurity posture and may lead to future attacks.

It is critical to take steps to prevent ransomware attacks. There are three key points to protect against this category malicious software and not only.

1. Enforce security (secure all accounts on Azure and locally)
2. Can be done using Microsoft Audit/Scoring/Monitoring from Azure
   1. Secure Identity Score-10 points to address.
      https://portal.azure.com/#view/Microsoft_AAD_IAM/IdentitySecureScoreV2Blade
   2. Secure Microsoft Azure Score- 56 points to address.
      https://security.microsoft.com/securescore
3. Prevent disaster and have in place post-disaster recovery.
   Microsoft Azure has a solution to Protect backups from Ransomware, Isolated Backup Vault.
4. Active awareness – all employees must be trained how to act.
   Any corporates usually require that all employee to pass every month-three month an ‘exam’: watch a 20-minute video and then answer to 10 – 15 questions.
   It is about how to protect company system against ransomware.
   It worths to spend money on training employees because they are the entry point of ransomware. I can help with this just now.

Someone may need NON-cloud physical SSD/BlueRay backups, can appear obsolete but it is an option and personal decision.