Ransomware remains the most devastating cyber attack UK businesses face and is considered a strategic threat by the NCSC. Organisations often face the dilemma of whether to pay, with consequences either way. What guidance is available to organisations?

• Paying ransom is as much a practical issue as a moral one.
• The consequences of paying or not paying.
• Setting out a strategy before the event.