Ransomware is a type of malicious attack where attackers encrypt an organization s data and demand payment to restore access. Attackers may also steal an organization s information and demand an additional payment in return for not disclosing the information to authorities, competitors, or the public. This Ransomware Profile identifies the Cybersecurity Framework Version 1.1 security objectives that support identifying, protecting against, detecting, responding to, and recovering from ransomware events. The profile can be used as a guide to managing the risk of ransomware events. That includes helping to gauge an organization s level of readiness to counter ransomware threats and to deal with the potential consequences of events.
Document Citations
Citations are generated automatically from bibliographic data
as a convenience and may not be complete or accurate.
Chicago
National Institute of Standards and Technology (NIST), Commerce Department. "Ransomware Risk Management: A Cybersecurity Framework Profile". Government. Commerce Department, February 23, 2022. https://www.govinfo.gov/app/details/GOVPUB-C13-dab67054de3f84d2597dfb892d3bf51e
APA
National Institute of Standards and Technology (NIST), Commerce Department. (2022, February 23). Ransomware Risk Management: A Cybersecurity Framework Profile. [Government]. Commerce Department. https://www.govinfo.gov/app/details/GOVPUB-C13-dab67054de3f84d2597dfb892d3bf51e
MLA
National Institute of Standards and Technology (NIST), Commerce Department. Ransomware Risk Management: A Cybersecurity Framework Profile. Commerce Department, (23 Feb 2022), https://www.govinfo.gov/app/details/GOVPUB-C13-dab67054de3f84d2597dfb892d3bf51e
Bluebook
National Institute of Standards and Technology (NIST), Commerce Department, Ransomware Risk Management, GovInfo, (February 23, 2022), https://www.govinfo.gov/app/details/GOVPUB-C13-dab67054de3f84d2597dfb892d3bf51e
