Exam CISA topic 1 question 875 discussion

option A made me laugh

D. Developing robust backup and recovery procedures Developing robust backup and recovery procedures is a critical component of ransomware mitigation. In the event of a ransomware attack, having up-to-date and secure backups allows the organization to restore its systems and data without having to pay the ransom. This not only mitigates the financial impact of the attack but also reduces the incentive for attackers to continue their ransomware campaigns against the organization. While other options such as conducting security awareness training (option C) and conducting penetration testing (option B) are important security measures, they are not as directly related to mitigating the impact of a ransomware attack as having reliable backup and recovery procedures in place. Option A, ensuring a payment method is available, is not a recommended approach. It's generally discouraged to pay ransomware attackers as it does not guarantee the recovery of data and can encourage further attacks. Organizations should focus on preventive measures and recovery strategies that do not involve paying ransoms.