On April 29, 2021, the Ransomeware Task Force (RTF) led by the Institute for Security and Technology released Combatting Ransomware: A Comprehensive Framework for Action: Key Recommendations from the Ransomware....
Over 50 organizations participate in the RTF, ranging from AWS, Cisco, Citrix, and Microsoft, to FireEye, Crowdstrike, Palo Alto Network, and even the FBI, Secret Service, and the National Governors Association.
RTF presented the RTF Framework:
1. Deter ransomeware attacks.
2. Disrupt the ransomware business model.
3. Help organizations prepare.
4. Respond to ransomeware attacks more effectively.
The full report makes 48 action recommendations, with five priority recommendations.
A major aspect is the need to provide governance and legal oversight of payment processors. Given that the grand daddy of crypto currency, Bitcoin, was specifically, explicitly designed to avoid government scrutiny and intervention, it will be fascinating to see if legislatures and law enforcement entities, including financial authorities, can actually carry out this recommendation.
[published on my blog 5/22/2021]
Craig
