Zerto, a Hewlett Packard Enterprise company, has announced the results of a major new study, confirming that ransomware continues to pose a serious threat and is viewed as one of the top concerns for viability within organizations. Companies are becoming increasingly aware of the damage caused by these attacks and understanding the dire reality of the potential compromise. The research indicates that nearly two-thirds (65%) of respondents consider ransomware to be one of the top three most serious threats to the viability of the organization.
The study was conducted by Enterprise Strategy Group (ESG) and co-sponsored by Zerto. Its findings, published in a new e-book titled ‘2023 Ransomware Preparedness: Lighting the Way to Readiness and Mitigation’, show that organizations can lose vital minutes to hours of time in recovery, resulting in significant and unacceptable consequences for large-scale operations. Combined with evolving techniques and targets designed to motivate payment from victim organizations, this data highlights the crucial need to reengineer recovery processes for ransomware attacks.
In addition, nearly 60% of respondent organizations report an impact to regulated data, such as personally identifiable information, in successful ransomware attacks. The study also indicates that configuration data faces an increasingly significant risk of compromise, with more than half of respondents indicating this data class was affected by a successful ransomware attack. This shows that attackers understand affecting infrastructure of a company at the core is an effective way to halt production in its tracks. As a result, IT professionals preparing to mitigate ransomware attacks must consider both business-related and infrastructure data equally in their efforts.
Successful methods for ransomware resilience
As the time and cost of securing data through the entirety of the data backup process continue to rise, new methods of protection arise to ensure the maximum security of backed up data. Air gapping has become a viable solution for these environments, with more than three-quarters of organizations using, testing, or expressing interest in this solution. By leveraging backups stored in volumes inaccessible by default and only accessible during protected backup sessions, cyber attackers are prevented from displacing or destroying backup data.
Despite the importance of this solution, the response breakdown shows only slightly more than one in four (27%) organizations have deployed it at this point, while 18% are in the process of testing and deploying an air-gapped solution. This confirms that while it is seen as a viable strategy, there is still much work to be done in the market overall to ensure that the vast majority have it in place.
Given the high frequency of ransomware attacks and the impacts of successful ones such as data and infrastructure loss, many organizations are left with damages that have an effect well beyond IT. Attackers often go beyond valuable data assets by undermining key infrastructure components and exposing significant gaps, including those in the backup infrastructure itself. IT leaders must understand that the nature of the threat goes well beyond just data and focus on protecting and further leveraging their backup and recovery infrastructure to de-risk and minimise business impact through advanced capabilities.
Christophe Bertrand, practice director, ESG
Survey methodology
ESG surveyed 600 qualified respondents in North America and Western Europe between May 2023 and June 2023.
