@ryanaraine link to where you found this, please? #thanks

@secprofgreen

@ryanaraine So all those companies that provide security services for Atlanta .gov will now charge them extra because those systems failed to protect?

@johullrich My guess is those are they people they brought in *on top of* what was already being spent on security.

@ryanaraine Can you elaborate on what CDW did ?

@MoneyMakeYouWet They're just the middle-man (reseller)

@ryanaraine The cost of prevention vs the cost of remediation. Thanks for posting this @ryanaraine . I hate being the post-incident call. Try to spend as much time with clients on the front end building proper layered defense and detection as to not have an incident in the first place.

@0xtero $52,000

@ryanaraine where does it state these were Ransomware based attacks? .. i'm just curious

@ryanaraine Moral of the story: back up your shit

@Bing_Chris That might actually be the most apt description of "crisis communications"

@ryanaraine Still not enough to configure firewalls.

@ryanaraine @xploretopher

@ryanaraine There is no way EY charged $600K just for this incident. That is likely a larger contract. The same can be said for Dell Secureworks. With the exception of life or death situations (healthcare), NEVER pay the ransom. It only assures you of being a target again. Data backups!!

@ryanaraine The more ill-defined the title, the more expensive they are..

@ryanaraine Read: EY is the third biggest ransom threat, coming in before Azure ;-P