EP17 Ransomware Recovery: What to Do When Everything Is Encrypted
4BIS Uninterrupted: Cyber Security and IT Podcast
Host Chris Hammonds and COO Jon Fausz discusses ransomware recovery and what businesses should do when they discover everything is encrypted. Jon explains recovery often takes far longer than simply “restoring from backup,” because companies rarely test disaster recovery, may need secondary equipment to preserve encrypted systems for cyber insurance forensics, and must first triage by severing internet access to stop data exfiltration while preserving evidence. They stress contacting an attorney to establish attorney-client privilege and notifying cyber insurance immediately. Jon describes “clean restore” as scrubbing backups to avoid restoring attacker persistence and warns many victims get re-encrypted. The episode covers timelines ranging from weeks to months, productivity and staffing impacts, payroll risk, misconceptions about going back to paper, and why prevention is far cheaper than ransoms and long-term business setbacks.
00:00 Welcome and Scenario
00:28 Ransomware Reality Check
02:41 First Steps After Encryption
05:07 How Long Recovery Takes
07:44 Clean Restore Explained
10:12 True Cost of Ransomware
13:56 Common Misconceptions
16:47 People and Payroll Risks
20:19 Speed and Response Planning
23:00 Final Takeaways and Wrap
Start a conversation with 4BIS on our website at https://www.4bis.com
ENJOY OUR VIDEOS?
If you want to support 4BIS and our channel the best thing you can do is Subscribe to the 4BIS channel
4BIS Cyber Security & IT Services
14 Knollcrest Drive
Cincinnati, OH 45237
Loading