An official website of the United States government
Here’s how you know
Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock () or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
These resources are designed to help individuals and organizations prevent ransomware attacks that can severely impact business processes and leave organizations withoutthe data they need to operate and deliver mission-critical services.
- #StopRansomware Guide
- The joint project between CISA, the Federal Bureau of Investigation (FBI), the National Security Agency (NSA), and the Multi-State Information Sharing and Analysis Center (MS-ISAC), in coordination with the Joint Ransomware Task Force (JRTF) is a customer centered, one-stop resource with best practices and ways to prevent, protect and/or respond to a ransomware attack. The guide, updated in May 2023, aims to inform and enhance network defense and reduce exposure to a ransomware attack, and it includes two resources: 1) Ransomware and Data Extortion Prevention Best Practices; and 2) a Ransomware and Data Extortion Response Checklist.
- CISA Insights: Ransomware Outbreak
- This product lays out three sets of straightforward steps any organization can take to manage their risk. These recommendations are written broadly for all levels within an organization.
- Ransomware: What It Is & What To Do About It
- A National Cyber Investigative Joint Task Force (NCIJTF) joint-seal ransomware fact sheet provides the public important information on the current ransomware threat and the government’s response, as well as common infection vectors, tools for attack prevention, and important contacts in the event of a ransomware attack.
- Cybersecurity 101 Video Series
- Gain an understanding of ransomware, phishing, and disinformation and how to keep you and your organization safe online from this three-part video series from CISA.
- Recognize Ransomware:Find out about what ransomware is, learn how to recognize a ransomware attack, discover what can be done to prevent a ransomware attack or lessen its impact, and learn how to recover from an attack.
- Fend Off Phishing: Learn how more than 90% of all cyber attacks begin with phishing. Find out how attackers leverage phishing attacks to gain access to protected systems, hosts, and networks. Discover how technology can be used to mitigate phishing attacks and train users to better recognize phishing emails.
- Gain an understanding of ransomware, phishing, and disinformation and how to keep you and your organization safe online from this three-part video series from CISA.
- Ransomware Protection and Response(NIST)
- The Computer Security Resource Center (CSRC) within the National Institute of Standards and Technology(NIST) offers a webpage on the ransomware threat with guidance, white papers, and how-to-guides designed tohelp organizations detect and respond.
- A Guide to Ransomware (U.S. Secret Service)
- This guide defines ransomware and describes what actions organizations should take to prepare, prevent, and respond to ransomware attacks.
- Preparing for a Cyber Incident (FBI)
- This FBI guide is geared toward a general audience and provides information on how to prepare for an FBI investigation of a cyber intrusion. It lists benefits and realities of working with the FBI. The guide provides details about what the FBI will and will not do while also helpingto differentiate the FBI from other agencies working cyber intrusions.
- FBI Cyber Investigative Response
- This is a high-level overview of things for cyber security professionals to consider and expect during an FBI investigation of a cyber intrusion, including descriptions of what the FBI can and cannot do.
