Re:N.J.’S Largest Hospital System Pays Up in Ransomware Attack
by jakewins on Monday December 16, 2019 @04:49PM
(#21807644)
Excellent comment, and indeed this seems like a much saner approach. I guess one complicating factor is the risk that an upgraded system remains vulnerable, which you'd need to account for in some manner.
Re:N.J.’S Largest Hospital System Pays Up in Ransomware Attack
by JumpCrisscross on Monday December 16, 2019 @04:52PM
(#21807686)
> one complicating factor is the risk that an upgraded system remains vulnerable, which you'd need to account for in some manner
Bundle the financing with cybersecurity insurance.
Sort of. Unless the cost and frequency of ransomware incidents are absurdly low, it makes sense to borrow to upgrade. Putting aside the moral hazard of being a compliant mark, there is the risk that the next attack won't be as cheap.
Their vendor ought to figure out the hospital's mean annual ransom payment, and come up with financing for an upgraded system that comes out to that amount. Now the cost is locked in, while the variance is sharply reduced. (No risk ever goes to zero.)