Companies purchase cyber insurance for a small fee and avoid risk of paying ransoms directly.
Make cyber insurance paying ransoms illegal and you'll see boards start funding IT security.
Make cyber insurance paying ransoms illegal and you'll see boards start funding IT security.
Boards will, generally, still not fund and support effective security culture without steep penalties for breaches (i am in infosec and speak to c suite folks as part of my gig; breach impact, in their current form, are "cost of business"). “Show me the incentive, and I will show you the outcome.” – Charlie Munger
https://www.insurancejournal.com/news/international/2021/05/... (Insurer AXA to Stop Paying for Ransomware Crime Payments in France)