Large enterprise and small to medium-sized organizations that have fallen victim to ransomware and cyber extortion incidents have faced the phases of grief post-cyberattack. The phases of grief can be difficult, including denial, anger, bargaining and acceptance. In many ways, the stages of grief are avoidable, but for too many companies, it is too late.
Companies can no longer prioritize speedy decision-making at the sacrifice of their company’s cybersecurity posture. They need to evolve from the phases of grief to phases of resilience because it is not a matter of if, but when (perhaps, again?) they will experience a ransomware and/or cyber extortion event.