The National Cybersecurity Center of Excellence(NCCoE) at the National Institute of Science and Technology(NIST) has developed a recovery guide for firms which are hit with ransomware. NIST announced that it has structured the guide with the help of vendors and businesses within the cyber security community.
The objective of the guide is to help companies recover their data from cyber security events, facilitate smooth recovery in the event of data compromise and manage enterprises risks associated or involved in cyber attacks.
NIST has titled the guide as “The Data Integrity Recovering from Ransomware and other Destructive Events”. The info is available in three volumes and can be used as per the user’s role within the organization like business decision makers, technology, and program managers or IT professionals.
Organizations can use the guidebook to provide tips on how to restore data to its last known good configuration and how to identify correct backup versions as well as poisoned or altered data.
On an additional note, the ransomware recovery guide devised by NIST also lets the user take a proper approach while dealing with malware attacks, high-level architecture like implementation, security characteristics analysis and functional evaluations to test data integrity.
Information regarding malicious insider threats, how to prepare for the immediate threat and aftermath of destructive malware and data protection related standards is also available.
NIST guide also illustrates how important it is for any ICS to have the technology and resources supporting advanced ICS threat detection capabilities and prescriptive responses to them.
