Ransomware and Malware Prevention

A key component of every cybersecurity design is ransomware and malware prevention. This generally includes a means to monitor the business network to detect and automatically install the required antivirus and other endpoint protection. Import aspects of malware prevention are:

 

 

Use of endpoint protection recommended best practices

  • Reputable endpoint protection software manufacturers will update and publish their best practices which maximize the protection their software provides

  • Best practices should be documented and lab tested, then implemented

  • The key settings adjustments should be documented in case an unexpected problem comes to light

  • Dolce Vita researches and implements manufacturer best practices every quarter

  • Remote monitoring and management (RMM) is configured to identify all software installed, and if a device is added to the network, endpoint protection is automatically installed

 
 
 

Email security has a significant effect on malware risk

  • Reputable email security vendors will publish updated best practices. 75+% of ransomware attacks originate via email so proper email security is paramount

  • Email security best practices should be documented and implemented quarterly

  • Email system policies should enforce the use of strong, complex passwords

  • Email management must include enforced use of multifactor authentication (MFA)

  • User access to email should include the use of multifactor authentication

  • Use of private email (Gmail, etc.) by users in the office should be prohibited

 
 
 

Antivirus and endpoint protection management

  • Remote monitoring and management is configured to automatically install antivirus and endpoint protection when new devices are placed on the network

  • Weekly or bi-weekly reviews of anti-malware systems ensure any problem trends are addressed early

  • Monitoring and real-time alerting by endpoint management provides exceptional protection

  • Remote monitoring and management (RMM) has the capability to disconnect a ransomware-infected device from the network automatically to halt infection spread and ransomware activity