RaaS, Layers and Passwords

Our Patron member Nova IT Solutions tells us all we need to know to protect our IT systems

We have all heard of legitimate software as a service (SaaS). Ransomware-as-aService (RaaS) is a cybercrime business model operated through invite-only platforms or the dark web.

Ransomware software developers lease or sell their malware to technically skilled criminals, or ‘affiliates’, usually in exchange for a share of their profits. Organisations listed with 11–100 employees represented the largest share of victims, accounting for 35.6% of attacks. Globally, manufacturing is a highly targeted industry sector, with ransomware attacks reported at 68% in Q1 2025

It’s essential to engage a specialist to provide a cohesive integrated solutions to safeguard your systems, data and users through multiple layers of protection. A whole range of services and security above and beyond the standard patching, anti-virus, and backups is needed. Ideally this will Include a security operations centre (SOC) with security information and event management (SIEM) which will utilise AI agents, behavioural analysis, and human cybersecurity specialists with a centralised password manager.

This will elevate protection against attacks and help reduce the organisations cybersecurity insurance premium.

When looking for a trusted IT provider, it’s important to consider key credentials. Look for evidence of ISO standards that are UKAS-certified. These certifications are independently audited to ISO and UKAS requirements, and each comes with a unique certificate number to verify an independent audit.

For example, relevant standards include:

• ISO 27001:2022 - Information Security Management Systems

• ISO 22301:2019 – Business Continuity Management

• ISO 9001:2015 – Quality Management

• ISO 14001:2015 – Environmental Management

In addition, IT providers should be Cyber Essentials certified and registered with the ICO (Information Commissioner’s Office). https://www.novait.solutions

❛❛Organisations listed with 11–100 employees represented the largest share of victims, accounting for 35.6% of attacks. Globally, manufacturing is a highly targeted industry sector, with ransomware attacks reported at 68% in Q1 2025