Laserfiche WebLink
6.D. - Page 25 of 33 <br />APPENDIX A — SURVEY QUESTIONS <br />1. Has your Organization had a Ransomware attack? Specifically, has there been an instance or <br />multiple instances when an attack has locked up a computer or computers and presented a <br />demand for ransom to unlock the infection? <br />If you answered Yes or Possibly to Question 1, please provide a detailed description of the <br />attack. What actions were taken once the attack was realized? <br />2. Is your Information Systems Budget adequate to secure your network properly from <br />malicious attack? <br />3. Please provide an explanation of your Systems Backup processes? How often are backups <br />run, where do you store the Backups? <br />4. Have you ever had to Restore from Backups? Please describe in detail why you did the <br />Restore and describe the process used. <br />5. Do you provide training to employees regarding Malware? <br />6. What defenses do you currently employ to block malware? Please be specific. (Firewall <br />brand/model, Software filters/spam blocker, etc.) <br />APPENDIX B — EMPLOYEE TRAINING OPTIONS <br />Phishing is the primary method of entry in cyber -attacks worldwide. Over the past few years, <br />some security industry companies have come up with excellent testing, training, monitoring, <br />measuring and reporting solution to help with employee training. The primary goal of an <br />employee training program is to change user's behavior when viewing emails that might contain <br />threats. <br />The typical components of these solutions include: <br />• Customized phishing attacks designed to test employees in spotting attack attempts <br />• Provide users a simple to use reporting tool to flag suspected attacks <br />• An incidence response platform for controlling the spread of an attack <br />• Reporting dashboards tracking user click-throughs <br />• Employee training programs <br />Here are some website links for the companies offering training solutions. <br />www.knowbe4.com <br />www.l ucysecurity. com <br />www.metacompliance.com <br />wtivw.mediapro.com <br />www.cofense.com <br />www.elevatesecurity.com <br />www.securitymentor.com <br />2019-2020 San Mateo County Civil Grand Jury 17 <br />146 <br />