APMA News - January/February 2022 - 43

coverage corner
is the best way to prevent a data breach. For example,
teaching employees to recognize phishing will
reduce the risk of ransomware, wire transfer fraud,
and unauthorized access.
Best Practices to Prevent
Ransomware Infection
* Segment your networks to build internal barriers
to prevent ransomware from spreading.
* Secure RDP with strong passwords and
multi-factor authentication. If you are not using
it, close it down or change it from default
port 3389.
* Use two-factor authentication and strong
passphrases (e.g.,
Thesunplaystenni$onlyInNovember!).
* Restrict users' permissions to install and run
software applications.
* Apply the " least privilege " principle to all systems
and services.
* Use application whitelisting (allows systems
to execute programs known and permitted by
security policy).
* Implement geo-IP fi ltering to block web traffi c
from entire countries.
* Create a white/blacklist for attachment types.
* Remove non-needed network shares/
mapped drives.
* Use ad-blockers.
I'm Infected. What Do I Do?
Isolate the infected computer immediately
by removing it from your network. Either
unplug the network cable or shut down the
wireless connection.
Call your insurance carrier to get immediate
access to post-breach services like a breach coach
and forensics. These actions will help minimize any
down time. Change passwords for all domain and
local credentials.
Tip
Your Business Continuity Plan and Incident
Response Plan should address ransomware. Are
you able to sustain business operations without
access to certain data? For how long? Have you
tested this? These questions should be asked, and
procedures should be documented so you are
prepared in the event you lose immediate access
to important business data.
Questions?
If you have any questions about ransomware
or how to defend your organization against
ransomware, contact PICA at 800-251-5727 or
at askpica@picagroup.com.
This article is provided by PICA
and Tokio Marine HCC.
IMPORTANT NOTICE: The information and suggestions
presented do not represent, warrant, or
guarantee the appropriateness, validity, or accuracy
of this information in every situation. This information
does not necessarily cover every possible
condition, protection, hazard, situation, or exposure
and is not warranted to be in compliance with laws,
regulations, codes, or standards in every jurisdiction.
This information is representative of reasonable
practices in the industry. However, you may wish
to investigate whether these recommendations are
applicable to your specifi c operations. Loss control
is the responsibility of your management.
APMA gratefully acknowledges
the support of PICA in providing
Coverage Corner to help inform
and educate members.
Visit www.apma.org/donate.
Make a difference for podiatry.
Join TEAM APMAPAC today!
PURPOSE: The American Podiatric Medical Association Political Action Committee's
purpose is to raise and disburse funds to candidates for federal office who support the
legislative priorities and goals of the podiatric medical profession.
IMPORTANT: You may contribute or not contribute without concern of being favored
or disadvantaged. Occupation/Employer information is required for aggregate
annual contributions of more than $200.00 by the Federal Election Campaign Act.
Federal election law does not permit corporate contributions to be used for donation
to candidates for federal office. Political contributions are not deductible for income
tax purposes.
APMA.ORG
apmanews
43
http://www.apma.org/donate http://www.APMA.ORG
APMA News - January/February 2022

Table of Contents for the Digital Edition of APMA News - January/February 2022
