Ransomware Response Plan – Crucial for Every Organization

It is crucial to decide beforehand what the organization would do if it has contractual agreements to deliver vendor or client data, but it cannot do so because that data is encrypted. Some additional force majeure type clauses may have to be inserted in all the contracts if possible stating that if the organization is under Ransomware attack and the data is still encrypted; it will not be able to provide it. This scenario has to be looked at from the legal point of view and also should be compliant with the company incorporation rules and laws.