3 ms·
It's not really up to the companies. In this day and age, everyone is a target for ransomware, so every company with common sense holds insurance against a rans
by IAmGraydon 2y ago
It's not really up to the companies. In this day and age, everyone is a target for ransomware, so every company with common sense holds insurance against a ransomware attack. One of the requirements of the insurance is that you have to have monitoring software like Crowdstrike installed on all company machines. The company I work for fortunately doesn't use Crowdstrike, but we use something similar called SentinelOne. It's very difficult to remove, and it's a fireable offense if you manage to.
- moffkalast 2y agoNo doubt mandated so that the NSA can have a backdoor to everything just by having a deal with each one of those providers. I think there's a Ben Franklin quote that applies here. "Those who would give up essential liberty, to purchase a little temporary safety, deserve neither liberty nor safety."
- IAmGraydon 2y agoHighly likely, yes.
- p_l 2y agoJust remember that the liberty was of the government to tax people for military spending. Or that Security Monitoring is well established field that has actually given a lot of results in preventing various attacks.
- adrr 2y agoYup, its also a requirement to be compliant for security standards like NIST.
- candiddevmike 2y agoWhat NIST requirement is that?
- ceroxylon 2y agoIt is kinda implied throughout SP 800-171r3 that EDRs will make meeting the requirements easier, although they are only specifically mentioned in section 03.04.06