The US Cybersecurity and Infrastructure Security Agency (CISA) has launched the Ransomware Readiness Assessment (RRA) to help companies strengthen their security.
According to Bleeping Computer, RRA is a security audit self-assessment tool for companies that want to better understand how well they are equipped to defend against and recover from ransomware attacks that target their IT, operational technology (OT) and industrial control system assets.
The RRA is a new module for the CISA’s Cyber Security Evaluation Tool. The CISA highlighted that this CSET module was tailored to RRA to assess ranging levels of ransomware threat readiness to be useful to companies regardless of their cybersecurity standard.
The CISA said the RRA can also be used to help firms evaluate their cybersecurity posture in relation to ransomware, provide an analysis dashboard with graphs and tables that present assessment results in both summary and detailed form and guides asset owners and operators through a process to evaluate their IT, OT and network security practices against ransomware challenges.
In order to use the assessment tool, users are required to install CSET and then login or start a new application and assessment. Following this, they need to select a maturity model and then select ransomware readiness assessment. Users are then able to complete the RRA assessment.
CISA said, “The RRA also provides a clear path for improvement and contains an evolving progression of questions tiered by the categories of basic, intermediate, and advanced.
“This is intended to help an organization improve by focusing on the basics first, and then progressing by implementing practices through the intermediate and advanced categories.”
A study by the International Institute for Strategic Studies recently found the US continues to lead the way as the number one cyber power worldwide, followed just behind by China.
Copyright © 2021 FinTech Global
