Cyber Defense eMagazine May Edition for 2022

With the Office of Personnel Management’s recently released telework guidance, the recommendation
to increase telework access means continued reliance on cloud and SaaS, and the accompanying
potential for cloud-targeted ransomware attacks.
It is projected that by 2025, 75% of IT organizations will be hit with at least one ransomware attack, it’s
more important than ever that agencies using SaaS and cloud programs back up their data.
A Three Step Process for Government Agency Resiliency
Cloud and SaaS capabilities will continue to be staples for federal agencies so, how can the government
make sure they protect and backup data to prevent ransomware attacks?
For government agencies to effectively protect cloud-hosted data and the associated web-based
software, they need to know their opposition, implement a strong backup infrastructure, and deploy
processes to deal with the aftermath of an attack.
Ransomware attacks tend to go after remote access methods that are not built in a secure manner),
utilize phishing attacks or capitalize on system vulnerabilities. By implementing secure remote access,
training employees about phishing and ensuring systems and software are always up-to-date, agencies
can take a preventative stance against ransomware.
Because ransomware agents seek to block system access in exchange for payment, the best defense
against these attacks is a strong backup infrastructure and data protection system.
Implementing multi-factor authentication for SaaS applications can strengthen data protection because it
strengthens accessibility requirements. And, while it goes without saying that data should always be
backed up, it’s especially important that cloud-based data backups are stored on devices that aren’t
connected to a network. According to Veeam’s 2021 Cloud Trends Report, more than half of SaaS
admins agree that data should be backed up to protect an agency against a cyber event.
And, while many government agencies already utilize data encryption, they should take that practice a
step further by encrypting backups for an added layer of protection.
Unfortunately, no matter how well agencies are prepared, ransomware attacks are still likely to occur in
the coming years. Therefore, it’s imperative that government is prepared to handle a successful attack
and has the necessary processes in place.
To start, government agencies should have an emergency contact list prepared that identifies who and
how to contact the necessary IT teams, employees and external resources in security, incident response
and identity management.
Prompt response can ensure necessary data is more effectively recovered as well as aid in minimizing
the risks related to the data that has been lost. If the data loss impacts citizens and their personally
identifiable information, cross-agency collaboration is likely to ensure the appropriate measures are put
in place to protect those affected.
Cyber Defense eMagazine – May 2022 Edition 173
Copyright © 2022, Cyber Defense Magazine. All rights reserved worldwide.