Why Backups Alone Can’t Save Hospitals From Ransomware | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #ransomware

Hospitals expect to bounce back quickly from ransomware, but only 16% of victim organizations recover within a day, said Omar Hussain, CEO and co-founder of QuellSecure. Containing ransomware before it spreads gives hospitals a faster way back than relying on backups alone.

See Also: Identity Threat Detection & Risk Mitigation: An Evaluation Framework

Antivirus and endpoint detection and response tools don’t stop all attacks, and restoring data from backups takes days or weeks when attacks get through. Response plans that look solid in tabletop exercises often collapse once an attack hits. “In theory, when you’re sitting around a table and having coffee and figuring it out, it’s nice,” Hussain said. “But when floors four, five, six, seven and eight are burning, everything goes out the window.”

QuellSecure’s containment approach limits a detonated payload to about nine files for faster recovery.

In this video interview with ISMG at the HealthSec NYC Summit, Hussain also discussed:

• Why 72-hour restoration mandates make healthcare a prime ransomware target;
• How spotting malicious encryption stops ransomware within microseconds;
• Why artificial intelligence makes containment the next layer of the security stack.

Hussain leads the development of real-time ransomware containment solutions. He has more than 20 years of experience in cybersecurity, including identity and access management, product strategy and healthcare security. He previously was CEO of Imprivata and led its 2014 IPO.