Ransomware is a type of malicious attack where attackers encrypt an organization s data and demand payment to restore access. Attackers may also steal an organization s information and demand an additional payment in return for not disclosing the information to authorities, competitors, or the public. This Ransomware Profile identifies the Cybersecurity Framework Version 1.1 security objectives that support identifying, protecting against, detecting, responding to, and recovering from ransomware events. The profile can be used as a guide to managing the risk of ransomware events. That includes helping to gauge an organization s level of readiness to counter ransomware threats and to deal with the potential consequences of events.
Document Citations
Citations are generated automatically from bibliographic data
as a convenience and may not be complete or accurate.
Chicago
National Institute of Standards and Technology (NIST), Commerce Department. "Ransomware Risk Management: A Cybersecurity Framework Profile". Government. Commerce Department, April 18, 2022. https://www.govinfo.gov/app/details/GOVPUB-C13-a9ff9246cbf576f7de94022940983171
APA
National Institute of Standards and Technology (NIST), Commerce Department. (2022, April 18). Ransomware Risk Management: A Cybersecurity Framework Profile. [Government]. Commerce Department. https://www.govinfo.gov/app/details/GOVPUB-C13-a9ff9246cbf576f7de94022940983171
MLA
National Institute of Standards and Technology (NIST), Commerce Department. Ransomware Risk Management: A Cybersecurity Framework Profile. Commerce Department, (18 Apr 2022), https://www.govinfo.gov/app/details/GOVPUB-C13-a9ff9246cbf576f7de94022940983171
Bluebook
National Institute of Standards and Technology (NIST), Commerce Department, Ransomware Risk Management, GovInfo, (April 18, 2022), https://www.govinfo.gov/app/details/GOVPUB-C13-a9ff9246cbf576f7de94022940983171
