Ransomware is a type of malware that encrypts victim data and demands a ransom payment to restore access.
Ransomware encrypts files, databases or entire systems and demands payment (usually cryptocurrency) for the decryption key. Modern variants (double extortion) exfiltrate data and threaten publication. Prevention includes ISO 27001 controls, offline backups, network segmentation and ISO 22301 response plans.
Authorities advise against payment. It does not guarantee recovery, funds organized crime and may create legal liabilities. Prevention and backups are the best defense.
ISO 27001 (Annex A controls), ISO 22301 (response and recovery plans), ISO 27035 (security incident management).
Need an assessment in this area?