Ransomware, Business owner torn apart by suppliers, their own IT & Operation departments
July 13, 2017 BY Frank Chin from iTGRC Asia
More than the price of Ransomware to pay.
Ransomware, Business owner torn apart by suppliers, their own IT & Operation departments. Ransom may even come from your supplier, or internal departments.
..... " - Malware got through to the host, operation impacted, files lost across multiple desktops. Business came to almost a complete halt. Business owner got really frustrated…
- Suppliers called in to rescue, turned into bitter fight among multiple parties…
- IT department gave the reason that’s far from acceptable by business owner, and yet Operation team remained silent. All added another flavor to the bitterness...
- Sparks and Smoke began to fill the room, yet everything remained status-quo, incident was yet contained, but parties dwelled into justifying and protecting themselves. SME Business owner is going to be really torn apart….
- Back to back review schedule continued, yet it’d never gotten to the heart of business owner - their worries and concerns.
- Business owner confronted with great loss – revenue loss, credibility at stake, potential loss of talents, lost at what is going on and what to DO.? ....
It’s not uncommon such scenario happens and similar episode repeats themselves across different industries and sectors , and with different flavors. Business owner decided on an independent party to mediate the situation.
An independent view by 3rd party gave the situation a different brush. It shared with every involving party different views and perspectives. It recognized that each party had truly done their job, and they could find themselves attested with evidential justification, therefore no one to be blamed.
Beside the tussle, what appeared to work was that an independent review found several essential dots over the entire saga. It connected them and determined the touch-points where each party might have missed to bring collaboration and understanding together to see each other eye to eye.
It’s a mix of science (the domain-knowledge, functional & technical know-how) and art (the experience, mind-set, maturity and multiple soft-skills that bring people together and bridge the cultural differences and generation gaps) that gives the business owner a sense of certainty and confidence, and to allow each party: suppliers, operation team, IT department and business to find their own position, give themselves a platform to strike a balance with every involving parties. Eventually, make the business owner happy when his/her business & operation is back on track.
Apart from the interplay between Art and Science, enterprise leadership skills and management insight come into play; asserted at a smaller scale and apply in a different business context and environment setting. Eventually, it demonstrates the values of an independent practitioner advisory and consultancy.
CISO_as_a_Service, offering