Ransomware remains a Top Cyber Threat to UK organisations according to the recent UK National Cyber Security Centre (NCSC) Annual Report.
Russia and Ransomware as a Service
The NCSC report highlights a disturbing trend where state-aligned Russian groups are thought to be actively targeting large UK organisations: often those holding personal data or providing critical infrastructure. A number of high-profile organisations, including Royal Mail International and NHS 111, fell victim to Russian attributed cyberattacks over the past year.
The Role of Ransomware as a Service
The report issues a warning that attacks of this type are expected to become more widespread. A key driver of this prediction is the rise of “Ransomware as a Service” (RaaS), where technically competent developers sell ransomware services to other criminal groups. Importantly, this business model means that less technically skilled groups are able to execute ransomware campaigns with relative ease.
The Importance of Cyber Security Fundamentals
In light of the persistent threat of ransomware, coupled with the emergence of AI-powered cyber-attacks, the NCSC report offers valuable insights for organisations seeking to fortify their defences:
- Root Cause: Poor Cyber Hygiene
Contrary to the perception that sophisticated attack techniques are the primary cause of cyber-attacks, the report finds that the majority of incidents occur as a result of poor “Cyber Hygiene”. Introducing and properly maintaining the basics of cybersecurity, therefore, is crucial to mitigating already well-known attack vectors.
- AI’s Impact: Enhancing Existing Threats
While artificial intelligence is a growing concern in the realm of cybersecurity, the report suggests that AI is more likely to enhance existing attack patterns rather than introduce entirely new and complex threats. So again, fortifying fundamental cybersecurity practices is key in fending off the majority of attacks.
idax: Simplifying Access Management for Enhanced Security
We know that Managing Access is one of the most fundamental Cyber Security controls, especially when it comes to Insider Threat. We also know, that for many reasons, traditional Access Management systems fail in providing sufficient control. Idax exists for this reason: to make Access Management as simple and effective as it should be.
Put idax to the test
To take these principles to the next level, consider trying idax Software in a demo:
- Discover risk: use idax to find staff with access they shouldn’t have.
- Show compliance: idax demonstrates regulatory compliance with proven Key Risk Indicator.
- Mobilise: engage the whole company in reducing risk and improving efficiency.
