1492 wrote:
So many hospitals get crypto ransomware as they fail to upgrade from unsupported OS such as WIN XP. Running an updated AV is no insurance, security patches adding additional layers of protection. In large enterprise environments, it only takes one employee to be fooled into clicking an infected link, and encrypting not only their local drives, but network attached drives. All because some CEO decides it unnecessary to allocate funds to protect their network.
And when it happens (not if), IT gets the blame and the CEO and execute staff still gets their bonus. The board and executives aren't interested in long term cost (old OS cost a lot to maintain), they're interested in up front savings.
that's my fight annually, to justify a measly few 100 grand for IT from a multi million dollar enterprise operating budget.
