Laserfiche WebLink
6.D. - Page 22 of 33 <br />R4. Given the results of their internal reports, governmental entities may choose to ask their IT <br />departments to review their own Cybersecurity Plan with the detailed template provided by <br />the FCC's Cybersecurity Planning Guide and consider customizing it using FCC's Create <br />Custom Cybersecurity Planning Guide tool (see footnote 52). <br />METHODOLOGY <br />Documents <br />• Attack incident reports were requested from IT Departments who experienced attack(s). <br />No incident reports were received. <br />Site Tours <br />• No site tours were performed as a part of this report. <br />Interviews <br />Reports issued by the Civil Grand Jury do not identify individuals interviewed. Penal Code Section 929 requires that reports of <br />the Grand Jury not contain the name of any person or facts leading to the identity of any person who provides information to <br />the Civil Grand Jury. <br />• Three Information Systems Managers of three different public entity IT organizations. <br />• Two non-public professional IT Managers. Both of these Managers' IT infrastructure <br />environments had been infected with Ransomware attacks. One paid the ransom and the <br />other did not. <br />• A professional Ransomware expert who often consults with companies who have been <br />attacked or desire assistance preventing attacks. He also teaches classes on preparing for <br />and preventing Ransomware attacks. <br />• Numerous security industry professionals at the RSA Conference held at Moscone Center <br />in San Francisco between February 20' and 28a' 2020. <br />BIBLIOGRAPHY <br />Anslinger, Joe. "File Backup vs. Image Backup — Which is Best?" Lieberman Technology. June <br />11, 2013. hti s:/Iwww.Itnow.com/tile-backu-vs-irna e-bacicu -which-is-best/ <br />Cisco Systems. Ransomware Anatomy of an Attack. <br />https://w-vv-w.yo-Litube.com/watch?v--4gR562GW7TI <br />Coveware, "Ransomware Payments Increase In Evolving Distribution of Enterprise <br />Ransomware Variants. " April 29, 2020. https://www.coveware.com/blop-/g1-2020-ransomware- <br />marketplace-report <br />Davis, Jessica. "As Ransomware Attacks Increase, DHS Alerts to Cybersecurity Insights." <br />Health IT Security, September 9, 2019. https://healtliitsecud!y.com/iiews'as-r iiisoiiiGa'arc- <br />attacks-increase-dhs-alerts-to-cvbersectirity-insi hts <br />2019-2020 San Mateo County Civil Grand Jury 14 <br />143 <br />