How insurers could help beat ransomware criminals

Enrique Dans
Enrique Dans
Published in
3 min readMay 21, 2022

--

IMAGE: A computer screen displaying a lock symbolizing a ransomware cyberattack
IMAGE: Pete Linforth — Pixabay

Ransomware represents an ever-worsening threat for companies in all industries, as well as for insurers, who have increased their premiums sharply in response to increasingly serious and frequent attacks.

The police’s pursuit of some groups related to the increase in criminal activity has led to fragmentation, making it harder to trace the criminals. At the same time, the proliferation of new exploits and technologies and the growth of distributed work has led to more attacks that exploit weak credentials and security procedures.

The issue here is the lack of a security culture in many companies, which in many cases continue to impose absurd and counterproductive security procedures on their employees that are poorly understood or based on myths such as frequent password changes: if you ask your employees to change their passwords every few months and to use a very strong password that is therefore difficult to remember, what you are doing in the vast majority of cases is not improving your security, but making it worse, and creating new vulnerabilities. Refocusing those procedures using password managers, adding second-factor authentication through applications that, in many cases are integrated with those managers, makes a lot more sense, and not only creates an easier working environment, but also makes attacks more difficult.

--

--

Enrique Dans
Enrique Dans

Professor of Innovation at IE Business School and blogger (in English here and in Spanish at enriquedans.com)