What Organizations Can Take Away From The New CISA Strategic Plan

Way back in the early days of the internet — 1989 to be exact — a malicious actor committed the first-known ransomware attack in history using floppy disks.¹ He sent these to victims via regular, old-fashioned, hand-delivered, mail.

Flash forward to today and ransomware attacks are far more sophisticated, bold and rampant, posing a serious threat to businesses and governments worldwide. According to the FBI, at least 649 organizations from multiple critical infrastructure sectors across the U.S. reported ransomware attacks in 2021.² But given that many of these attacks go unreported, it is impossible to know the real number.

For all their sophistication, what makes ransomware attacks so tricky to combat is how easy it is for hackers to deploy the malware that carries a virus. A malicious actor simply needs to dupe a single victim to gain access to an organization's entire network. And as more of us use personal devices in our work communications, the surface area