Eric Geller @ericgeller
Due diligence req: Before paying a ransom, a company would have to determine whether it could recover from the attack “through other means,” including by seeing if experts have published a decryption tool that works for them. It would have to report to CISA on this process. — PolitiTweet.org