Over half of businesses now have policy on ransomware attacks, claims study
New research by Databarracks has revealed 54% of businesses now have a defined policy in place to deal with ransomware attacks – whether this means paying a ransom, relying on insurance policies or refusing to pay at all.
The findings are from Databarracks’ 2021 Data Health Check, launching today. Running since 2008, the annual report surveys over 400 IT decision-makers in the UK on critical issues relating to cybersecurity, IT resilience, cloud and remote working.
When asked if their organisation had a policy for paying out on ransomware attacks:
- 21% have a policy to never pay a ransom
- 14% will pay a ransom if it is lower than the cost to recover systems
- 13% will pay if the ransom is covered by their cyber insurance policy
- 6% will pay only as a last resort if there is no other way to recover data
Says Peter Groucutt, Managing Director of Databarracks: “Ransomware is the fastest growing threat we face. 29% or organisations were affected by ransomware in last 12 months, up from just 9% in 2016.
“It’s encouraging to see organisations being proactive, setting policies and taking steps to better protect themselves against ransomware.
“However, the fact almost a third don’t have a policy of any kind is a significant gap. Of those that do, there’s still a strong tendency either to pay the ransom if it’s cost-effective to do so, or rely on cyber insurance policies to cover the financial hit.
“Neither of these approaches are sustainable in the long run. Paying a ransom, even if the demand is relatively small, emboldens criminals to hit harder and more frequently in future. There’s also always the possibility you won’t get your data back after paying up.”
View the online report here: https://datahealthcheck.
Download the full report here: https://www.
