US CISA releases a Ransomware Readiness Assessment (RRA) tool

The US CISA has released the Ransomware Readiness Assessment (RRA), a new ransomware self-assessment security audit tool.

The US Cybersecurity and Infrastructure Security Agency (CISA) has released the Ransomware Readiness Assessment (RRA), a new ransomware self-assessment security audit tool for the agency’s Cyber Security Evaluation Tool (CSET).

RRA could be used by organizations to determine their level of exposure to ransomware attacks against their information technology (IT), operational technology (OT), or industrial control system (ICS) assets.

“The Ransomware Readiness Assessment (RRA) will help you understand your cybersecurity posture with respect to the ever-evolving threat of ransomware.” CISA says. “The RRA also provides a clear path for improvement and contains an evolving progression of questions tiered by the categories of basic, intermediate, and advanced. This is intended to help an organization improve by focusing on the basics first, and then progressing by implementing practices through the intermediate and advanced categories.”

The tool would help organizations in improving their resilience to ransomware attacks by implementing best practices.

The US agency highlights that RRA:

• Helps organizations evaluate their cybersecurity posture, with respect to ransomware, against recognized standards and best practice recommendations in a systematic, disciplined, and repeatable manner.
• Guides asset owners and operators through a systematic process to evaluate their operational technology (OT) and information technology (IT) network security practices against the ransomware threat.
• Provides an analysis dashboard with graphs and tables that present the assessment results in both summary and detailed form.

CISA recommends organizations download and use the CSET Ransomware Readiness Assessment, which is available on the Agency’s Git Hub Repository.

Follow me on Twitter: @securityaffairs and Facebook

Pierluigi Paganini

(SecurityAffairs – hacking, RRA)

The post US CISA releases a Ransomware Readiness Assessment (RRA) tool appeared first on Security Affairs.