Ransomware
What is Ransomware?
Malicious software that encrypts a victim's files or systems and demands payment (ransom) for the decryption key. Ransomware has become one of the most financially damaging forms of cyber attack affecting organisations worldwide.
Terms that appear alongside ransomware
Each of these is named in at least one of the same controls as ransomware. The number is how many controls name both.
- cybersecurity 28 shared controls
- nist 25 shared controls
- resilience 22 shared controls
- incident response 20 shared controls
- cyber incident 17 shared controls
- breach notification 17 shared controls
- lessons learned 17 shared controls
- compliance 17 shared controls
Frameworks that govern ransomware
What the standards actually require on ransomware
Requirements naming ransomware across 6 standards, quoted from the control text.
The reporting business entity must give the designated Commonwealth body (the Department and ASD, through ASD's online report form) a ransomware payment report within 72 hours of making the ransomware payment or of becoming aware that it has been made on its b...
cyber-security-act-2024-australia::27(1) · s 27(1) Report a ransomware payment to the designated Commonwealth body within 72 hours →The bank documents and communicates strategies for advanced attacks such as ransomware and cyber extortion, data destruction and DDoS.
rbi-cybersecurity-framework-for-banks::179 · Para 179: documented strategies for ransomware, data destruction and DDoS →Threats are untargeted (the ship or company is one of many victims or collateral damage, as with NotPetya, using tools freely available online) or targeted (the company or ship is chosen, often after reconnaissance, with tailored tools).
BIMCO-2.2 · Types of cyber threats →A covered entity that makes a ransom payment as the result of a ransomware attack must report the payment to CISA not later than 24 hours after the payment is made, even if the attack is not a covered cyber incident.
CIRCIA-2242a2 · 24-Hour Ransom Payment Report →Security Dimension 6 Data Integrity per X.805 Clause 6.6: Data Integrity keeps data correct and accurate. Data are shielded from being altered, deleted, created or copied without authorization, and any such unauthorized activity is made detectable.
X805-Dim6-Data-Integrity-Correctness-Accuracy-Unauthorized-Modification-Deletion-Detection · ITU-T X.805 Security Dimension 6 - Data Integrity + Correctness + Accuracy + Unauthorized Modification Prevention + Deletion Detection + Hashing + HMAC + Digital Signatures + Merkle Trees + Blockchain Integrity + File Integrity Monitoring (FIM) →Set incident response plans and contingency plans (including recovery plans) for each type of attack (DDoS, website defacement, malware and ransomware including targeted attacks, exploitation of vulnerabilities to steal information, attacks causing fraudulent...
japan-fsa-cybersecurity-guidelines-for-financial-institutions::2.5.1-B · 2.5.1 Incident response plan and contingency plan: basic actions →Questions people ask about ransomware
What is Ransomware?
Why is Ransomware important for compliance?
Which compliance frameworks address Ransomware?
Where can I learn more about Ransomware?
See how Ransomware applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.