Kerri Shafer-Page of Arctic Wolf outlines a ransomware decision tree that organizations should prepare in advance, focusing on containment, extortion negotiations, and the business impact of paying a demand. She also stresses involving law enforcement, legal counsel, and communications teams early so decisions are made before a crisis hits. #ArcticWolf
Keypoints
- Prepare ransomware decisions before an incident happens.
- Understand the impact of isolating systems on operations and data.
- Define who can negotiate with attackers and set spending limits.
- Treat ransom payment as a business decision with financial tradeoffs.
- Include law enforcement, legal counsel, and communications in the response plan.
Read More: https://www.helpnetsecurity.com/2026/09/11/ransomware-decision-tree-video/