无忧传媒

Cyber threats like ransomware attacks continue to intensify in scope and sophistication. To protect their networks, companies need multifaceted expertise across a number of fields: in-depth knowledge of the law, acumen for risk management, an appetite for learning, an understanding of the players in the ever-evolving ecosystem, and an embrace of change.

Principal Bridget Quinn Choi brings all of this and more to聽无忧传媒鈥檚 new Incident Response team.

After 9 years as a New York City litigator, Choi pivoted to a new career as claims counsel to a Bermudian insurance company, Endurance, now known as Sompo International. The job not only offered a better work-life balance after the birth of her first child, but it exposed her to unfamiliar fields of liability like complicated professional indemnity, catastrophic and high severity claims, and the emerging field of cyber risk.

鈥淚 was given an opportunity to handle a broad swath of high-profile cases from all around the country,鈥� she said. A defining moment came when she joined the company鈥檚 large-loss committee, where she provided a litigator鈥檚 perspective on the biggest, most complicated cases within the company.

"The chief claims officer often said that if it is on the news or in the paper it is likely to cross our desks. The variety of legal issues, jurisdictions, and cultural approaches to law and negotiation was incredibly intellectually satisfying to tackle,鈥� Choi said.

Her legal experience, coupled with her growing passion for cyber, privacy, and incident response, spurred Choi鈥檚 career forward. She joined Navigators (now a division of Hartford) to lead their cyber claims team, and later pivoted to global digital forensics and incident response firm Kivu Consulting, where she served as a managing director for strategy and general counsel.

鈥淚 offered Kivu legal and claims experience and they deepened my technical knowledge,鈥� Choi said.

Her diverse perspective and privacy expertise, along with her deep knowledge of the insurance industry, led to a job offer from 无忧传媒.聽

Addressing ransomware is one of Choi鈥檚 priorities with the 无忧传媒 Incident Response team.

鈥淩ansomware is now a societal scourge that happens to companies big, medium, and small, and it鈥檚 not just a money issue anymore,鈥� Choi said. 鈥淣ow attackers are shutting down operating systems, affecting supply chains, and even having an effect on human life, like when a hospital is attacked.鈥�

Even enacting the simplest security measures can significantly reduce the risk of ransomware attacks, Choi said. Examples include:

• Managing remote access: Open remote desktop ports are like unlocked doors into the network. 鈥淐ompanies need to stop having such a low barrier of entry for attackers to gain access to their network,鈥� Choi said.
• Patching programs: Focusing on a patching cadence is essential. Choi provided one example: 鈥淢any widely used VPN appliances have had CVEs and patches issues. Exploits are designed and sold to gain access to unpatched networks, particularly through unpatched VPNs. If you haven鈥檛 patched these, you鈥檙e leaving your company wide open for attack.鈥�
• Data backups: Will your business be able to function after attackers have your data? Even if an organization pays their attackers, decrypting doesn鈥檛 solve for the access and may not clean the network completely, 鈥淧urchasing an attacker鈥檚 decrypter key should be a last resort and not a panacea to a ransomware attack.鈥�

鈥淭hese measures are essential elements to build a secure cyber foundation,鈥� Choi said. Beyond securing their internal networks and external ecosystem, organizations can remain cyber vigilant by building and testing a ransomware resilience program, which should comprise of:

• Crisis management
• Business continuity
• Disaster recovery

A ransomware attack is akin to a hostage crisis. In such a high-stakes, high-pressure situation, preparation has its benefits. 鈥淐ompanies with a culture of ransomware resilience are least likely to have to pay,鈥� she said.

A love of reading, learning, and change is the perfect complement to the demands of cybersecurity鈥攚hich is why Choi feels at home there and, she said, others can, too.

鈥淭here鈥檚 a part in cyber for everyone,鈥� Choi said. 鈥淣ot everyone has to be a coder or debugger. You can go into legal, risk, consulting, as well as a myriad of highly technical areas. There are so many facets to cyber and it鈥檚 so fast-moving.鈥�

This rapid pace of change makes cyber a great equalizer, she said. 聽

鈥淵ou have to constantly evolve,鈥� Choi said. 鈥淭he field hasn鈥檛 existed long enough for anyone to claim tenure. Those who work to continuously understand the risk will be best positioned to succeed.鈥�

Learn more about cybersecurity at 无忧传媒, , and the firm鈥檚 Incident Response capabilities.