Ransomware and Institutional Responses in the HE Sector

Ransomware is a rapidly growing type of cyber attack typically involving locking of systems and/or theft of data with an accompanying demand for payment before the access is restored or the stolen data returned. Due to the increase in ransomware attacks targeting educational institutions, the National Cyber Security Centre (NCSC) has issued warnings to universities to be vigilant.

In this paper, we outline typical university responses, key risks, and areas of best practice we have observed during our reviews.