Protective measures against ransomware

“The term ransomware stands for a type of malware that restricts or prevents access to data and systems. A ransom is then required for the release. Such malware either blocks complete access to the system or it encrypts certain user data. Ransomware, which is directed against Windows computers, is particularly widespread. In principle, however, all systems can be attacked by ransomware.” [Source: BSI (German)]

In order to be able to protect against this type of attack, the Bavarian State Office for Data Protection Supervision provides a checklist and a list of requirements for potentially endangered systems. The requirements are based on the IT Basic Protection Compendium of the Federal Office for Information Security (BSI) and can be used to check your own systems and adapt them if necessary. The two documents can be accessed via the following links:

• Checklist for the ransomware prevention test (only available in German)
• Handout for the checklist- Details of the focal points of the ransomware prevention test (only available in German)

The IT law department of the Bavarian state universities and colleges made the checklist questions available in a workable Excel table. We offer the document for download here:

• BayLDA_Ransomware_Grundschutz.xlsx (only available in German)