Preparation for and Response to a Ransomware Attack in the Organization: Cybersecurity Best Practices

This document presents a series of best practices for improving the organizations ability to prepare for and respond to a ransomware event. The text is intended to assist the Chief Information Security Officer (CISO) and decision-makers within the organization in preparing for and coping with a ransomware event in the organization. Other actors that may gain added value from this document are the Chief Information Officer (CIO), a Cybersecurity Methodologies Specialist, a Cybersecurity Implementer Specialist, a Cybersecurity Technology Specialist (Cybersecurity Architect), and data/teleprocessing/information technology (IT) and system communication personnel. This publication is part of the "Cybersecurity Best Practices" collection, a compendium of practices, methodologies and recommendations in cybersecurity oriented to organizations, developed by the Israel National Cyber Directorate (INCD), and adapted in this series by the Inter-American Development Bank (IDB), with the objective of facilitating access to this body of knowledge throughout the Latin American and Caribbean region.