--- title: Ransomware Prevention Best Practices - Omnis Technologies description: Your business is not too small to be hit by ransomware attacks. Here are some ransomware prevention best practices that can help protect you. image: https://www.omnistech.com/hubfs/Imported_Blog_Media/Ransomware.jpg --- [![Omnis-logo](https://www.omnistech.com/hubfs/Omnis-logo.png)](https://www.omnistech.com) - [MANAGED IT](https://www.omnistech.com/managed-it-support) - [CYBERSECURITY](https://www.omnistech.com/cybersecurity-consulting) - RESOURCES - [BLOG](https://www.omnistech.com/blog) - [SMALL BUSINESS CYBERSECURITY PLAN](https://www.omnistech.com/small-business-cybersecurity-plan) - [VIDEOS](https://www.omnistech.com/videos) - COMPANY - [ABOUT US](https://www.omnistech.com/about-us) - [TESTIMONIALS](https://www.omnistech.com/testimonials) - [CAREERS](https://www.omnistech.com/careers) [I Need IT Support](https://www.omnistech.com/contact-us) [Submit a Ticket](http://portal.omnistech.com/WCC2/Home/Login?ReturnUrl=%2fWCC2%2f) # Ransomware Prevention Best Practices Your business is not too small to be hit by ransomware attacks. Here are some ransomware prevention best practices that can help protect you. [Brian Lothridge](https://www.omnistech.com/blog/author/brian-lothridge) Nov 22, 2021 --- ![Ransomware Prevention Best Practices ](https://www.omnistech.com/hs-fs/hubfs/Imported_Blog_Media/Ransomware-1024x684.jpg?width=1024&height=684&name=Ransomware-1024x684.jpg) Ransomware has made a lot of headlines this year:  - Hackers temporarily shut down the [Colonial Pipeline](https://www.al.com/news/2021/11/10-million-reward-offered-in-colonial-pipeline-ransomware-attack.html) in May, which created fuel shortages in parts of the United States. - [JBS SA](https://www.bloomberg.com/news/articles/2021-11-08/interpol-arrest-five-alleged-members-behind-revil-ransomware), the world’s largest meat processor, was hit in late May.  - Tech company Kaseya was [hit in July](https://www.bostonherald.com/2021/11/08/us-charges-2-suspected-major-ransomware-operators/), affecting 800-1,500 businesses that rely on its software.  - [Even municipalities](https://www.wboy.com/news/harrison/data-stolen-in-bridgeport-ransomware-attack-found-on-dark-web/) are getting hit. Ransomware threats continue to climb as attacks become more [sophisticated and effective](https://www.businessinsider.com/what-to-know-about-the-growing-threat-of-ransomware-attacks-2021-11). **But you run a small- or medium-sized business, so who cares?** Hackers are going after big money, right? Nope. In 2019, [small businesses made up 71%](https://www.techtimes.com/articles/245791/20191022/71-of-ransomware-attacks-target-small-businesses-are-you-ready.htm) of ransomware targets.  How do you protect yourself? Here are some ransomware prevention best practices for businesses just like yours. ## What Is Ransomware? [Ransomware is software hackers use](https://www.mcafee.com/enterprise/en-us/security-awareness/ransomware.html) to access your data. Once they’re inside your network, they can view sensitive information and block you from accessing your device or network data. This type of cyberattack earns its name, as ransomware hackers offer to unlock the data if you pay a hefty price **—** [often in cryptocurrency](https://www.npr.org/2021/06/10/1004874311/how-bitcoin-has-fueled-ransomware-attacks).  **However, paying the ransom offers no guarantee that you’ll regain access** to your data or that the hackers haven’t downloaded your data with plans to sell it. The FBI advises that you don’t pay the ransom, but instead [contact the FBI immediately](https://www.fbi.gov/contact-us/field-offices/portland/news/press-releases/becybersmartcybersecurity-awareness-month--ransomware--video-link). The sooner you contact the FBI, the more effective its help will be. ## Ransomware Prevention Best Practices for Your Business A small business could go bankrupt over a ransomware attack, so you need to stay vigilant. Here are five ransomware prevention best practices: 1. Shut off remote desktop access 2. Patch and harden 3. Maintain your virus protection 4. End-user education 5. Back up everything ### Shut Off Your Remote Desktop Access Seriously. Do it now. [Remote desktop protocol](https://docs.microsoft.com/en-us/troubleshoot/windows-server/remote/understanding-remote-desktop-protocol) (RDP) — allowing outside access to an internal server or workstation — is an easy way to get hacked. Remote desktop protocol has long been the [most popular initial ransomware attack vector](https://www.paloaltonetworks.com/blog/2021/07/diagnosing-the-ransomware-deployment-protocol/). Just turn it off. You can place your RDP behind a [virtual private network](https://www.cisco.com/c/en/us/products/security/vpn-endpoint-security-clients/what-is-vpn.html) (VPN) or a [firewall](https://us.norton.com/internetsecurity-emerging-threats-what-is-firewall.html). These can’t [completely protect you from ransomware](https://nordvpn.com/blog/what-is-ransomware/) attacks, but they will [leave you less vulnerable](https://www.sikich.com/insight/does-a-firewall-protect-against-malware-and-ransomware/).  ### Patch to Prevent Ransomware Have a plan in place for when [software and operating system patches](https://us-cert.cisa.gov/ncas/tips/ST04-006) come out. Make sure these patches are installed ASAP so you don’t leave yourself open to vulnerabilities. You can install the updates after hours or on the weekend **so you don’t interrupt services.**  Windows 10 and 11 do automatic patch updates. However, it may help for your business to update these manually so you don’t accidentally make certain online services temporarily unavailable. Strengthen your security by using a strong firewall. Make sure the firewall’s [firmware](https://www.techopedia.com/definition/2137/firmware#:~:text=Firmware%20is%20a%20type%20of,tasks%20and%20functions%20as%20intended.) is always up to date. Plan to check for updates quarterly on all network devices.  ### Maintain Your Virus Protection Your business should have virus protection that’s proactive — alerting you when threats are found.  For example, we use [Vipre](https://www.vipre.com/) for all of our clients. When it finds threats on a server or workstation, we get **instant notifications**. We send an email to the client to say we found something suspicious that they should review.  Don’t let your customers or bosses discover viruses the hard way! ### Educate Your People About Ransomware Prevention Best Practices End-user education is critical. Everyone with access to your accounts and network devices needs to be a part of preventing a ransomware attack. They should know to: - Not share passwords - Use a different password for different accounts - Use complex passwords - Change their passwords every 45 to 90 days - Use two-step verification - Avoid phishing scams (Your clients will not really ask you to buy them gift cards. We promise.)  Failure to follow this advice could have disastrous effects. A compromised password was all it took for the [Colonial Pipeline to shut down](https://www.cnn.com/2021/06/04/politics/colonial-pipeline-ransomware-attack-password/index.html).   ### Back up Everything When you get hit with ransomware, how do you recover?  Create and use a ransomware backup strategy. [Having a backup](https://www.carbonite.com/learn/how-to-backup-computer) ensures you won’t be **locked out of critical files.** If ransomware strikes, you can wipe your computer and reinstall your files from your backup. Make sure your backups are running. Consider holding your backup files outside of your network using [off-site backups](https://www.acronis.com/en-us/articles/offsite-backup/) or [cloud-based backups](https://www.omnistech.com/backups/). ## Do You Need Help Backing up Your Data? We can help you develop policies on backups and make sure they fit your business’s needs. We also offer **encrypted backups for information that needs to be secure,** like medical records. We can also help you develop ransomware prevention best practices that help protect your company from an attack. Contact us for your [free IT consultation](https://www.omnistech.com/contact-us/). Also, enjoy this guide to help your small business develop a cybersecurity plan. [![](https://www.omnistech.com/hs-fs/hubfs/Imported_Blog_Media/Omnis-SMB-cybersecurity-plan-CTA-Jun-09-2022-02-15-48-36-PM.png?width=868&height=371&name=Omnis-SMB-cybersecurity-plan-CTA-Jun-09-2022-02-15-48-36-PM.png)](https://blog.omnistech.com/small-business-cybersecurity-plan-ebook) [Ransomware](https://www.omnistech.com/blog/tag/ransomware) [Backups](https://www.omnistech.com/blog/tag/backups) ## Similar posts Education ### [\[Video\] How Does Ransomware Spread?](https://www.omnistech.com/blog/how-does-ransomware-spread) Ransomware is a malicious program that encrypts every file in your system. How does ransomware spread? This post gives a brief overview. protocol80 Feb 28, 2023 business cyber security ### [Top 12 Ransomware Attack 2024 Questions For Small Businesses](https://www.omnistech.com/blog/top-12-ransomware-attack-questions-for-smbs) Ransomware attacks worldwide exceeded $20 billion in 2022 and could rise to $265 billion by 2031. Here are our top 12 ransomware attack 2024 Q&As. Brian Lothridge Apr 19, 2024 Education ### [Securely Reopening Your Small Business | IT Checklist for SMB Cybersecurity](https://www.omnistech.com/blog/securely-reopening-your-small-business-smb-cybersecurity) The economic and workplace disruption caused by COVID-19 has left SMBs especially vulnerable to cyberattacks. A firm tracking ransomware trends,... protocol80 Jun 22, 2020 [![OMNIS Technologies](https://www.omnistech.com/hubfs/Asset%201WHITE.png)](https://www.omnistech.com) OMNIS Technologies PO Box 334 32 Lafayette Ave. Lewis Run, PA 16738 ### Services - [Managed IT](https://www.omnistech.com/managed-it-support) - [Cybersecurity](https://www.omnistech.com/cybersecurity-consulting) ### Resources - [Blog](https://www.omnistech.com/blog) - [Small Business Cybersecurity Plan](https://www.omnistech.com/small-business-cybersecurity-plan) - [Videos](https://www.omnistech.com/videos) ### Company - [About Us](https://www.omnistech.com/about-us) - [Careers](https://www.omnistech.com/careers) - [Testimonials](https://www.omnistech.com/testimonials) - [Contact Us](https://www.omnistech.com/contact-us) © 2022 protocol 80, Inc All rights reserved [Privacy Policy](https://www.omnistech.com/privacy-policy)