The CISA #StopRansomware Guide is a comprehensive, one-stop resource designed to help organizations prevent, detect, respond to, and recover from ransomware and data extortion incidents. Developed collaboratively by CISA, the FBI, NSA, and the Multi-State Information Sharing and Analysis Center, the guide is structured in two main parts: prevention best practices and a step-by-step response checklist. It provides actionable recommendations for defending against common ransomware attack vectors, such as phishing, compromised credentials, and vulnerable remote access systems, and emphasizes the importance of preparation through measures like maintaining offline, encrypted backups and developing incident response plans. The guide also includes updated strategies based on recent threat intelligence, guidance on cloud backups, and aligns with broader cybersecurity performance goals, making it a critical tool for enhancing organizational resilience against evolving ransomware threats.
Home / Function (NIST CSF 2.0) / ID - Identify / RA - Risks Asst / Controls