2022 Ransomware Readiness Report

Overconfident and Underprepared?

Download now

Adarma 2022 Ransomware Readiness Report

Overconfident and Underprepared?

In January 2022, Adarma undertook research across 500 UK organisations with over 2000 employees. We asked the senior leadership of these organisations a series of questions to uncover how concerned business leaders are about ransomware, how confident they are in their organisation’s ability to deter or prevent an attack, how able they are to respond to an attack and to understand the steps they have undertaken to minimise this significant risk.

Our report highlights the key findings and provides guidance to the c-suite and executive board on how to prepare their organisation, not just the security team, for what some might say is an inevitable ransomware attack.

Key Findings

Epidemic Levels

Has your organisation experienced a ransomware attack?

According to our study, 58% of UK businesses with more than 2000 employees have suffered a ransomware attack.

Criminals are Cashing In

Did you pay the ransom?

A staggering 67% confirmed they had paid the ransom, for smaller businesses this was 100%, while it appears those with higher revenues were generally less likely to pay.

IT to Blame?

Who should be held accountable?

19% of business leaders believe the individual duped into clicking on a phishing email should be held accountable, while 48% would levy blame at the IT Security Team.

Fill in the Form to Read the Full Report

Discover How You Can Better Prepare Your Organisation With our Ransomware Readiness Blog Series

RansomCloud: How Ransomware is Attacking the Cloud

Read blog

Anti-Ransomware Awareness Day: Re-examining WannaCry 5 years on

Read blog

Ransomware Readiness from a Legal Team’s Perspective

Read blog

Debunking 5 Major Ransomware Myths & Misconceptions

Read blog

Practical Tips for Leading a Team Through a Cyber Attack

Read blog

Ransomware: Your Checklist for Building an Incident Response Plan

Read blog

15 Recent Ransomware Attacks

Read blog

Ransomware as a Service (RaaS) Explained

Read blog

christina-wocintechchat-com-HocFQHhGjDE-unsplash

Building the Right Cybersecurity Team

Read blog

mohammad-shahhosseini-MUsyGmmdxuo-unsplash

The Six Steps of Detection and Response

Read blog

How to Get Attackers Out of Your Network

Read blog

The Magnificent Seven Components of a Solid Cyber Defence Plan

Read blog

Raising the Bar of your Cyber Defence Plan

Read blog

The Expert View

Ransomware Strategies – Preparing for an Attack

“Ransomware is the cyber-plague of our time,” said John Maynard, CEO of Adarma, opening a recent TEISS breakfast briefing at The Goring in London. He told attendees, all senior executives from a range of industries, that ransomware attacks are up 144 percent, year-on-year, and the amount paid in ransoms has increased by 75 percent to $500,000.

Leading a Team Through a Devastating Cyber Attack

Practical advice and insight from a former CEO

#1

Invest in avoiding the attack and an effective response (Keep Them Out, Get Them Out)

#2

Determine if you might discuss/negotiate and/or pay and, if so, prepare for this

#3

Agree on recovery priorities (for both business and security) and how they will be balanced

#4

Invest in understanding your environment and maintaining this understanding

#5

Clearly determine who needs to create and execute the response plan and hold them to account

#6

Select suppliers with the right experience level and the right attitude before the crisis

#7

Agree and implement how you will communicate (assume normal channels are watched)

#8

Agree and implement how you will detect, respond and recover (assume disruption will occur)

#9

Exercise the plan and stress test the organisation (including your suppliers)

#10

Engage with your core customers and agree how you will work together during the crisis

“Ransomware is at epidemic levels and there is a disconnect between organisations’ confidence in their levels of preparedness in the face of an attack and what we are seeing on the ground. With almost 60% of UK businesses with more than 2,000 employees having experienced a ransomware attack, it is critical that we elevate this risk within our own organisations”

– John Maynard, Chief Executive Officer, Adarma

We believe that the main advantage we have over an attacker is the time to prepare a response with a credible plan.

Prepare

Intelligence, planning and rehearsing, testing and simulating breaches are all important factors to integrate into your defences.

Protect

Manage your attack surface through risk-based vulnerability management and controls.

Detect

Early context rich detection, before action is taken is critical to contain and stop the bleed.

Respond

Ensure you have the right experts on call to support you during the incident response. Ensure you have mechanisms in place to document lessons learned and improve plans.

Reporting a Ransomware Attack

When your business suffers a ransomware attack or a related cybersecurity incident, you might need to report it to the Information Commissioner’s Office (ICO). Under the General Data Protection Regulation (GDPR) rules, which went into effect as of 25th May 2018, it’s mandatory that you report data breaches to the ICO within 72 hours.

Below are some useful links when reporting a ransomware attack:

Services to Reduce Your Ransomware Risk

We examine your current response framework and recommend improvements.

Cybersecurity Advisory & Assessments

Outcome-based cybersecurity assessments tailored to your needs

We deliver interactive table top cyber incident response exercises.

Incident Response Services

Intelligence-led preparation, practice and real-world cyber incident response

We work with you to create cyber incident response playbooks.

Incident Simulation

Attacks will happen, it is how you respond to them that matters

Let’s Talk

Speak to our experts and see how we can help protect your business.

Contact us

Latest Insights

5 Key Takeaways from the NCSC Annual Review 2024

Latest Insights

5 Key Takeaways from the NCSC Annual Review 2024

2022 Ransomware Readiness Report

Overconfident and Underprepared?

Adarma 2022 Ransomware Readiness Report

Overconfident and Underprepared?

Key Findings

Epidemic Levels

Criminals are Cashing In

IT to Blame?

Fill in the Form to Read the Full Report

Discover How You Can Better Prepare Your Organisation With our Ransomware Readiness Blog Series

Discover How You Can Better Prepare Your Organisation With our Ransomware Readiness Blog Series

The Expert View

Leading a Team Through a Devastating Cyber Attack

Practical advice and insight from a former CEO

#1

#2

#3

#4

#5

#6

#7

#8

#9

#10

We believe that the main advantage we have over an attacker is the time to prepare a response with a credible plan.​

We believe that the main advantage we have over an attacker is the time to prepare a response with a credible plan.​

Reporting a Ransomware Attack

Services to Reduce Your Ransomware Risk​

Cybersecurity Advisory & Assessments

Incident Response Services

Incident Simulation

Managed Threat Advisory

Risk-Based Vulnerability Management​

Managed Detection & Response

Alert: Threats associated with the escalating geopolitical tensions between Russia and Ukraine

Adarma Supports Next Generation of Cybersecurity Talent

Practical Tips for Leading a Team Through a Cyber Attack

Ransomware: Your Checklist for Building an Incident Response Plan

Let’s Talk

Contact Us

We believe that the main advantage we have over an attacker is the time to prepare a response with a credible plan.

We believe that the main advantage we have over an attacker is the time to prepare a response with a credible plan.

Services to Reduce Your Ransomware Risk

Risk-Based Vulnerability Management