--- title: 5 Ways to Increase Your Ransomware Resilience description: Here are 5 pragmatic steps to increase your ransomware resilience and what to do once you've been attacked to avoid high payouts. image: https://www.daymarksi.com/hubfs/ransomware-2320793_1280.jpg --- - [MICROSOFT SERVICE OFFERINGS](https://www.daymarksi.com/microsoft-service-offerings) - [CONTACT](https://www.daymarksi.com/location-for-our-new-england-office-massachusetts) - [SUPPORT](https://www.daymarksi.com/support) [![DM_LogoTag_white-20yr](https://www.daymarksi.com/hubfs/brand-assets/DM_LogoTag_white-20yr.png "DM_LogoTag_white-20yr")](https://www.daymarksi.com) - [About](https://www.daymarksi.com/about-daymark) - [Why Daymark](https://www.daymarksi.com/why-daymark) - [Leadership](https://www.daymarksi.com/leadership) - [Industry Awards](https://www.daymarksi.com/industry-awards) - [Daymark Solutions Charitable Trust](https://www.daymarksi.com/charitable-trust) - [Customers](https://www.daymarksi.com/customers) - [Testimonials](https://www.daymarksi.com/testimonials) - [Technical Certifications](https://www.daymarksi.com/technical-certifications) - [Careers](https://www.daymarksi.com/careers) - [Locations](https://www.daymarksi.com/location-for-our-new-england-office-massachusetts) - [Solutions](https://www.daymarksi.com/solutions) - [Cloud Solutions](https://www.daymarksi.com/cloud) - [CMMC Compliance](https://www.daymarksi.com/understanding-the-cybersecurity-maturity-model-certification) - [Data Center Infrastructure](https://www.daymarksi.com/solutions/data-center-infrastructure-for-storage-networking-compute-security) - [Data Protection](https://www.daymarksi.com/solutions/data-protection-backups-recovery-restore) - [Networking](https://www.daymarksi.com/solutions/networking-and-security) - [Security](https://www.daymarksi.com/solutions/networking-and-security) - [Virtualization](https://www.daymarksi.com/solutions/virtualization) - [All Technology Partners](https://www.daymarksi.com/partners) - Cloud - [Microsoft Azure](https://www.daymarksi.com/microsoftazure) - [Microsoft Azure Government](https://www.daymarksi.com/protecting-government-data-for-the-defense-industrial-base) - [Microsoft 365](https://www.daymarksi.com/microsoft-365) - [Copilot for Microsoft 365](https://www.daymarksi.com/copilot-for-microsoft-365) - [Microsoft 365 GCC High](https://www.daymarksi.com/microsoft-gcc-high-for-defense-contractors) - [Mimecast](https://www.daymarksi.com/cloud) - [Okta](https://www.daymarksi.com/cloud) - [All Cloud Partners](https://www.daymarksi.com/cloud-partners) - [Services](https://www.daymarksi.com/services) - [Microsoft Service Offerings](https://www.daymarksi.com/microsoft-service-offerings) - [Assessment & Health Checks](https://www.daymarksi.com/services/assessment-and-health-checks) - [Cloud Architecture](https://www.daymarksi.com/services/custom-cloud-computing-implementations-and-services-in-new-england) - [CMMC Compliance Readiness](https://www.daymarksi.com/understanding-the-cybersecurity-maturity-model-certification) - [Contract & Maintenance Management](https://www.daymarksi.com/services/contract-maintenance-management) - [Documentation & Knowledge Transfer](https://www.daymarksi.com/services/documentation) - [Government Community Cloud](https://www.daymarksi.com/microsoft-gcc-high-for-defense-contractors) - [Identity Mangement](https://www.daymarksi.com/microsoft-entra-id-workshop) - [Implementations](https://www.daymarksi.com/services/it-project-implementation-on-budget-on-time-on-scope) - [Proof of Concepts](https://www.daymarksi.com/services/proof-of-concept-for-information-technology-initiatives) - [Solution Architecture](https://www.daymarksi.com/services/it-solution-architecture-for-complex-storage-network-and-computer-solutions) - [Staging & Integration](https://www.daymarksi.com/services/staging-and-integration) - [MyDaymark](https://www.daymarksi.com/mydaymark/) - [Advanced Support](https://www.daymarksi.com/mydaymark/advanced-support) - [Premier Support](https://www.daymarksi.com/mydaymark/premier-support) - [Managed Services](https://www.daymarksi.com/mydaymark/managed-services) - [Management Platform](https://www.daymarksi.com/mydaymark/management-platform) - [Security & Compliance](https://www.daymarksi.com/mydaymark/security-compliance) - Industries - [Energy & Utilities](https://www.daymarksi.com/new-england-it-project-management-and-implementation-for-energy-and-utilities-industry) - [Financial Services](https://www.daymarksi.com/new-england-it-project-implementation-for-financial-services-companies) - [Defense Industrial Base](https://www.daymarksi.com/protecting-government-data-for-the-defense-industrial-base) - [Healthcare](https://www.daymarksi.com/healthcare-information-technology-development-and-implementation) - [Life Sciences](https://www.daymarksi.com/new-england-it-initiative-implementation-for-life-sciences-companies) - [Resources](https://www.daymarksi.com/information-technolocy-resources) - [Case Studies](https://www.daymarksi.com/information-technolocy-resources?types=casestudy) - [Data Sheets](https://www.daymarksi.com/information-technolocy-resources?types=datasheet) - [Partner Resources](https://www.daymarksi.com/information-technolocy-resources?types=partnerresources) - [Workshops](https://www.daymarksi.com/information-technolocy-resources?types=workshop) - [News & Events](https://www.daymarksi.com/news-events) - Blog - [Daymark IT Insights](https://www.daymarksi.com/blog) - [Cole Tramp's Microsoft Insights](https://www.daymarksi.com/blog/topic/cole-tramps-microsoft-insights) ![banner-why-daymark.jpg](https://www.daymarksi.com/hs-fs/hub/30865/file-2671640025-jpg/2015_Images/Banner_Images/banner-why-daymark.jpg?width=1400&name=banner-why-daymark.jpg "banner-why-daymark.jpg") ##### **Daymark IT Insights** Enterprise IT, cloud, security, and AI guidance from Daymark’s technology experts. # [5 Ways to Increase Your Ransomware Resilience](https://www.daymarksi.com/blog/5-ways-to-increase-your-ransomware-resilience) Posted by [Sean Gilbride](https://www.daymarksi.com/blog/author/sean-gilbride) Thu, Oct 26, 2023 - [Tweet](https://twitter.com/share) ![ransomware-2320793_1280](https://www.daymarksi.com/hs-fs/hubfs/ransomware-2320793_1280.jpg?width=1280&height=839&name=ransomware-2320793_1280.jpg)   The risk of a ransomware attack continues to increase at a frightening triple-digit annual growth rate. How bad is it? Bad, really bad. Businesses based in the U.S. face an 80% chance of an attack, compared to 31% chance in EMEA and 9% in the Asia-Pack region. As the attackers’ sophistication increases and cybergangs are forming, it is important to understand what the attackers are going after and how to increase your ransomware resilience.   **Ransomware Demand and Payment Trends** -  In 2022, companies with $10 million in revenue or less had an average payout of $690,9961 - Large enterprises (revenue of $5 billion plus) took a bigger hit, with an average $2,464,3392 ransom payout - Recent ransom demands have been as high as $30 million with payouts that have exceeded $8 million - Threat actors are increasingly focused on extortion techniques—often layering them on top of each other - Harassment is another extortion tactic being used in more ransomware cases. Ransomware threat actor groups will target specific individuals in the organization, often in the C-suite, with threats and unwanted communications3 - Cybercriminals threatened to leak stolen data in about 70% of ransomware cases involving negotiation in late 20224 - The United States is still the most severely impacted, accounting for 42% of the observed leaks in 20225 - As of late 2022, threat actors engaged in data theft in about 70% of cases compared to 40% in mid-20216  **Don’t Count on the Government for Help ** A report from The Committee on Homeland Security and Governmental Affairs “[America’s Data Held Hostage: Case Studies in Ransomware Attacks on American Companies](https://www.hsgac.senate.gov/imo/media/doc/Americas%20Data%20Held%20Hostage.pdf)” documents notable attacks on three U.S. companies from REvil – a Russian cybercrime ring. The report found the federal government's response to these incidents sorely lacking and "recalled there was no 'here's a playbook' discussions with the FBI regarding how to best respond.” The document doesn't name the three companies, all of which reported the attacks to law enforcement, and instead refers to them as entities A, B, and C. The Senate Committee recommends that companies take steps to make it more difficult and costly for ransomware gangs to breach their networks. This includes security basics like patching vulnerabilities, using multi-factor authentication, keeping device and software inventories, requiring employees use complex passwords, maintaining offline backups, and encrypting sensitive data. It also calls on the FBI and the Cybersecurity & Infrastructure Security Agency (CISA) to work more closely to share information and do more to help ransomware victims recover their data and mitigate damages. **         ** **5 Ways to Increase Your Ransomware Resilience** As the bad actors continue to hone their tactics, it’s more important than ever to bolster your defenses and improve your ransomware resilience. Here are five ways to increase your resilience: 1. Improve your Data Protection - its is your last line of defense - Implement a hardened data protection solution with a comprehensive ransomware detection & remediation tool kit - Security requirements include hardened OS, immutable retention locked snapshots, encryption, MFA, RBAC, etc. - Ransomware capabilities include: Immutable & retention locked snapshots, rapid & granular detection of compromised data, sensitive data inspection, established “last known good” to prevent reinfection and rapid recovery orchestration 2. Establish an employee training regimen - There are many solutions available to both train and assess your employees’ threat landscape knowledge and best practices. It cannot be overstated how critically important employee training and awareness is. 3. Implement a robust security posture that includes: - Regular OS patching for all devices within your network - Up-to-date antivirus and anti-malware software on all devices - Robust email security including SPAM filtering, phishing detection & prevention, link inspection, etc. 4. Establish Zero Trust practices for critical resources - Use the principle of least privilege to limit user access to only the resources and data required for their job responsibilities. - To improve security, require strong, unique passwords for all accounts and consider multi-factor authentication (MFA) for critical services. - Monitor user accounts and revoke access to terminated or inactive personnel 5. Develop an Incident Response plan - Identify an incident response provider and put them on retainer to streamline engagement when needed - Establish a dedicated incident response team with defined roles and responsibilities as well as a robust incident response plan - Perform recurring ransomware recovery roundtable exercises with key stakeholders including executive, IT and LoB resources **You’ve Been Attacked – Now What? ** Clearly time is of the essence once the ransom demand has been made. Expert and immediate help is critical. Our partner, [Palo Alto’s Unit 42](https://www.paloaltonetworks.com/unit42) elite threat intelligence team of cybersecurity experts, brings together threat researchers, incident responders and security consultants to create an intelligence-driven, response-ready organization. Unit 42 advisors can provide you with the hotline needed to negotiate next steps and guide you before, during and after an incident with an intelligence-driven approach. **How Daymark Can Help**** ** Daymark’s team of senior consultants can help your business approach the threat of ransomware pragmatically, across many facets of your environment. Our industry knowledge from data center to cloud, coupled with strategic partnerships like Palo Alto, can help ensure that your business is taking the appropriate precautions and employing the most useful technology to protect and recover the data most important to you. [Contact us](https://www.daymarksi.com/location-for-our-new-england-office-massachusetts) if you have questions or would like to take the next steps for ransomware recovery advance planning.   1-2 [https://www.scmagazine.com/resource/key-findings-the-state-of-ransomware-2023-report](https://www.scmagazine.com/resource/key-findings-the-state-of-ransomware-2023-report) 3-6 [https://www.paloaltonetworks.com/content/dam/pan/en_US/assets/pdf/reports/2023-unit42-ransomware-extortion-report.pdf](https://www.paloaltonetworks.com/content/dam/pan/en_US/assets/pdf/reports/2023-unit42-ransomware-extortion-report.pdf)   ### Subscribe to Daymark Insights ### Latest Posts ### Browse by Tag - [Microsoft (88)](https://www.daymarksi.com/blog/topic/microsoft) - [Cloud (70)](https://www.daymarksi.com/blog/topic/cloud) - [Cole Tramp's Microsoft Insights (58)](https://www.daymarksi.com/blog/topic/cole-tramps-microsoft-insights) - [Azure (55)](https://www.daymarksi.com/blog/topic/azure) - [Security (49)](https://www.daymarksi.com/blog/topic/security) - [Data Protection (43)](https://www.daymarksi.com/blog/topic/data-protection) - [Microsoft Fabric (41)](https://www.daymarksi.com/blog/topic/microsoft-fabric) - [Data Governance (38)](https://www.daymarksi.com/blog/topic/data-governance) - [AI (35)](https://www.daymarksi.com/blog/topic/ai) - [Partners (33)](https://www.daymarksi.com/blog/topic/partners) - [Compliance (31)](https://www.daymarksi.com/blog/topic/compliance) - [Data Center (30)](https://www.daymarksi.com/blog/topic/data-center) - [CMMC (27)](https://www.daymarksi.com/blog/topic/cmmc) - [Backup (26)](https://www.daymarksi.com/blog/topic/backup) - [Daymark News (23)](https://www.daymarksi.com/blog/topic/daymark-news) - [Storage (22)](https://www.daymarksi.com/blog/topic/storage) - [GCC High (19)](https://www.daymarksi.com/blog/topic/gcc-high) - [Veritas (18)](https://www.daymarksi.com/blog/topic/veritas) - [Virtualization (18)](https://www.daymarksi.com/blog/topic/virtualization) - [Cybersecurity (17)](https://www.daymarksi.com/blog/topic/cybersecurity) - [Azure AI Foundry (16)](https://www.daymarksi.com/blog/topic/azure-ai-foundry) - [Featured Gov (16)](https://www.daymarksi.com/blog/topic/featured-gov) - [Government Cloud (16)](https://www.daymarksi.com/blog/topic/government-cloud) - [Disaster Recovery (15)](https://www.daymarksi.com/blog/topic/disaster-recovery) - [Cloud Backup (14)](https://www.daymarksi.com/blog/topic/cloud-backup) - [Managed Services (13)](https://www.daymarksi.com/blog/topic/managed-services) - [Copilot (11)](https://www.daymarksi.com/blog/topic/copilot) - [Industry Expertise (9)](https://www.daymarksi.com/blog/topic/industry-expertise) - [NIST SP 800-171 (7)](https://www.daymarksi.com/blog/topic/nist-sp-800-171) - [Hybrid Cloud (6)](https://www.daymarksi.com/blog/topic/hybrid-cloud) - [Networking (6)](https://www.daymarksi.com/blog/topic/networking) - [Power BI (6)](https://www.daymarksi.com/blog/topic/power-bi) - [Pure Storage (4)](https://www.daymarksi.com/blog/topic/pure-storage) - [Reporting (3)](https://www.daymarksi.com/blog/topic/reporting) - [Services (3)](https://www.daymarksi.com/blog/topic/services) - [AI for Defense (2)](https://www.daymarksi.com/blog/topic/ai-for-defense) - [Cloud Security (2)](https://www.daymarksi.com/blog/topic/cloud-security) - [Everpure (2)](https://www.daymarksi.com/blog/topic/everpure) - [GDPR (2)](https://www.daymarksi.com/blog/topic/gdpr) - [Microsoft Purview (2)](https://www.daymarksi.com/blog/topic/microsoft-purview) - [Apple (1)](https://www.daymarksi.com/blog/topic/apple) - [CMMC 2.0 Requirements (1)](https://www.daymarksi.com/blog/topic/cmmc-2-0-requirements) - [FedRamp AI (1)](https://www.daymarksi.com/blog/topic/fedramp-ai) - [Mobile (1)](https://www.daymarksi.com/blog/topic/mobile) - [Power Automate (1)](https://www.daymarksi.com/blog/topic/power-automate) [see all](https://www.daymarksi.com/blog/5-ways-to-increase-your-ransomware-resilience#) ### How Can We Help?  [![Speak With An Expert](https://no-cache.hubspot.com/cta/default/30865/5de282fd-640c-49b2-bf45-603dbee66842.png)](https://cta-redirect.hubspot.com/cta/redirect/30865/5de282fd-640c-49b2-bf45-603dbee66842) #### About Daymark Solutions is an experienced technology integration and solutions provider that helps organizations effectively architect, implement, and deploy customized solutions to help their customers grow and scale their IT infrastructure. Specializing in AI, cloud and modern data center solutions, Daymark’s unique combination of in-depth technical knowledge, extensive experience, and proven methodologies enable its customers to successfully address even the most difficult technology challenges. #### Connect      #### Links - [About](https://www.daymarksi.com/about-daymark) - [Industry Expertise](https://www.daymarksi.com/industry-experience-in-finance-healthcare-energy-utilities-and-life-sciences) - [Solutions](https://www.daymarksi.com/solutions) - [Services](https://www.daymarksi.com/services) - [Cloud](https://www.daymarksi.com/services/custom-cloud-computing-implementations-and-services-in-new-england) - [Resources](https://www.daymarksi.com/whitepapers-videos-analyst-reports-and-case-studies-on-information-technologies) - [News & Events](https://www.daymarksi.com/news-events) - [Blog](https://www.daymarksi.com/blog) #### Contact **Corporate Headquarters** Daymark Solutions 131 Middlesex Turnpike Burlington, MA 01803 **Corporate:** [+1 781-359-3000](tel:17813593000) **Email:** [info@daymarksi.com](mailto:info@daymarksi.com) ![DM_LogoTag_white.png](https://www.daymarksi.com/hs-fs/hubfs/Daymarksi-2017/Image/DM_LogoTag_white.png?width=176&name=DM_LogoTag_white.png "DM_LogoTag_white.png") © 2026 Daymark Solutions, Inc. All rights reserved.  |  [Daymark Privacy Policy](https://www.daymarksi.com/hubfs/Daymark%20-%20Privacy%20Policy.pdf) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Sean Gilbride", "url" : "https://www.daymarksi.com/blog/author/sean-gilbride" }, "dateModified" : "2023-10-26T14:25:50.865Z", "datePublished" : "2023-10-26T14:25:50.000Z", "headline" : "5 Ways to Increase Your Ransomware Resilience", "image" : [ "https://www.daymarksi.com/hubfs/ransomware-2320793_1280.jpg" ], "mainEntityOfPage" : { "@id" : "https://www.daymarksi.com/blog/5-ways-to-increase-your-ransomware-resilience", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://www.daymarksi.com/hubfs/v2/images/daymark-logo.png" }, "name" : "Daymark Solutions, Inc." } } ```