Operationalize Your Team for Continuous Ransomware Defense

Michael Figueroa (He/Him)
The Startup
Published in
8 min readFeb 10, 2020

--

5 steps to bootstrap your organization’s cyber defenses without security expertise

Security professionals need to simplify our approach to cyber defense. (Aisan Nourbash/Scopio)

Tune out news reports that blame victims for improperly defending against ransomware. They are based on the fallacy that sound security is accessible.

The cybersecurity community too often treats ransomware incidents through a flawed lens of idealism when blaming organizations for poor cyber defenses. For leaders in most organizations, cybersecurity is overwhelming because they simply lack the expertise, time, or resources to filter through the noise. My 20+ years of experience indicates that our perspective on the problem is critically limited because security professionals generally only work with well-resourced enterprises that can afford our services. Most organizations do not fit that profile, meaning that even the most basic technical expertise is largely out of reach.

Consider that, according to the JP Morgan Chase Institute, 88% of US businesses in 2013 had less than 20 employees, with nearly 60% of those recording annual revenues of less than $100K. Compare those statistics against reports about a 2019 Robert Half survey that found CIOs of mid-size businesses were seeking an ideal technical support employee to end-users ratio of 1:64. Furthermore, a December 2019 Salary.com report estimated that the…

--

--

Michael Figueroa (He/Him)
The Startup

Latinx tech & biz exec making solutions more accessible for mission-driven orgs. Fmr President, Advanced Cyber Security Center. linkedin.com/in/michaelfigueroa