So I read this the other day and have taken a step back to think on this one.
From the article:
The new reporting requirements are designed to help the government understand how much money is being lost to ransomware, which has been notoriously difficult to track.
Why does the government need this stat? What will they do with it?
Yes it provides a record of what is happening. Sorry, but the government mandate may also be a way to validate expense claims to lower taxes. I question who will be using this data? Just the government? or will they share with others? Reputation here could become an issue. Look at organisations that reported and what happens to their stock prices, customer satisfaction, etc.
It will also help intelligence teams gain greater visibility over online risks, recognised as a growing national security threat.
I believe the teams understand the risks and I for one would rather have assistance in understanding how the governments are working to stop this,
It is likely that fines will be issued if ransomware payments are not reported.
Double taxation!
+++++++++++++++++++++++++++++++++++++++++++++++
Personally, i do not feel that it will stop any of the bad actors from attacking others but instead, could increase their activities against specific markets if they find out who is paying and the what amounts?
Well intended but without further details, hard to say what the eventual outcome will be.
off my soap box
d
