Data is a company’s most valuable asset. So, doing everything in your power to protect that asset is a given. But what if the threat you’re guarding your data against is known to cripple operations, tarnish reputations, and drain finances? And even worse, what if that threat is only getting more dangerous, thanks to a little thing called artificial intelligence (AI)?

Unfortunately, for many businesses, there’s nothing “what if” about this scenario. As many as 72% of businesses worldwide have experienced a ransomware attack at some point and know just how devastating the aftermath can be.

That’s why we tapped two cybersecurity experts to share their insights on ransomware, its evolution, and how businesses can protect themselves. Read on to hear what Tom Vazdar, the chair of the Enterprise Cybersecurity Master’s program at the Open Institute of Technology (OPIT), and Venicia Solomons, a seasoned cybersecurity architect, have to say on this topic in their “Cyber Threat Landscape 2024: Navigating New Risks” master class.

Ransomware: The Basics

Ransomware is nothing new. However, there are always new business owners who (luckily) haven’t encountered it yet. So, let’s cover the basics first.

Ransomware is a natural product of phishing, a human-centric cyber threat that relies on social engineering to deceive individuals into providing sensitive information or downloading malicious attachments. The latter is what ultimately triggers a ransomware infection. Tom describes the process like this:

You click on a malicious link.

Your device downloads the malware.

Your system is now infected, and somebody else is essentially in charge.

They encrypt your data and demand you pay ransom for the encryption key to get it back.

As mentioned, dealing with ransomware attacks and cyber criminals has become a daily reality for companies worldwide. What certainly doesn’t help companies is the fact that ransomware is now also offered as a service.

Ransomware as a Service

Just a few short years ago, cybercriminals needed sophisticated technical skills and tools to develop and deploy ransomware. Now, all they need is access to the dark web.

As Tom explains it, numerous cyber criminals on the dark web offer ransomware as a service, a malicious adaptation of the software as a service (SaaS) business model. So, you essentially pay them to deploy their ransomware on your behalf.

The most famous, or should we say infamous, among these threats is the LockBit model, which has wreaked havoc on thousands of companies worldwide. The issue is that LockBit ransomware attacks vary in tactics, techniques, and procedures. In other words, an organization must be prepared for virtually anything.

How Has AI Affected Ransomware?

Ransomware is dangerous on its own. But throw artificial intelligence into the mix, and you’ve got a massive threat on your hands.

AI has undoubtedly revolutionized the cybersecurity industry, for better or for worse. The “worse” part is that AI is making cyber threats smarter. Unfortunately, for organizations, this particularly applies to ransomware. According to a 2024 report by the U.K.’s top intelligence agency, ransomware stands to gain the most from AI.

How so?

Well, AI has the potential to create malware that circumvents current cybersecurity detection measures. After all, AI is trained using data. Give it malware data to analyze, and it will learn how to evade detection by traditional cybersecurity tools.

AI will also likely generate a surge of new cybercriminals as the barrier to entering into cybercrime decreases with AI-powered tools.

Of course, the more capable and experienced attackers will also benefit from AI. They will use it to identify system vulnerabilities, bypass security defenses, and craft more precise social engineering attacks.

How to Prevent Ransomware Attacks

Given how quickly ransomware is evolving, preventing attacks requires a multi-faceted approach that combines technology, education, and proactive measures. Tom and Venicia break down this approach.

1. Keep Your Systems Updated

When it comes to anything cybersecurity-related, this is the first crucial step. Keep all your systems and programs updated and patched if you want to stand any chance of protecting against known vulnerabilities.

Tom says that there’s a new vulnerability “basically each week,” so having a process in place to update regularly and patch systems is essential.

Venicia adds that something as simple as a basic software update can go a long way toward protecting your data from ransomware. This update will limit its ability to spread through your network, thus reducing the impact of the attack.

2. Invest in Quality Training

Having the most advanced protection systems in place will do you no good if you don’t have well-trained employees.

These employees must learn to recognize potential cyberattacks that could introduce malware into your organization’s system (e.g., phishing emails). Of course, the next step is to respond effectively to the attack. Though each organization has its own set of rules in place, the proper response typically involves disconnecting from the network and contacting IT support.

3. Implement Defensive Systems

Humans are undoubtedly the first line of defense against cyber threats. However, they can’t do it alone. That’s why implementing advanced Endpoint Detection and Response (EDR) solutions is crucial. Tom explains that these systems will help you identify and, more importantly, mitigate a threat on time.

However, he also adds that you must restrict user permissions within the system. This way, even if a single component is compromised, the ransomware won’t take down the entire network.

4. Implement Network Segmentation

As you can see, a huge part of mitigating ransomware attacks is ensuring they don’t affect the entire network. That’s where network segmentation can also help.

As Tom explains, with network segmentation, the malicious actor in control of your network won’t be able to do “lateral movements.” In other words, even if they do manage to penetrate your network, they won’t be able to spread within it.

So, network segmentation is a critical part of the multi-layer approach every organization should adopt when it comes to cybersecurity.

5. Collaborate With Others

Remember – you aren’t the only one experiencing cyberattacks. In Venicia’s words, “ransomware has a global impact.”

That’s why organizations in the private sector are constantly encouraged to “talk to each other,” as Tom puts it. Of course, there’s always the issue of confidentiality, but Tom explains that this, too, can be resolved with a “closed circle of trust.”

Also, organizations in the private and public sectors are encouraged to share relevant information with institutions such as the Financial Services Information Sharing and Analysis Center (FS-ISAC).

In Europe, there’s also something called The No More Ransom Project. This Europol initiative has existed for years, hosting decryption keys for different types of ransomware. It has helped numerous individuals and organizations decrypt their systems and avoid paying the ransom.

Of course, this won’t always be possible, as the attackers typically keep changing the encryption keys. However, anything that helps organizations avoid paying the ransom is worth trying.

Why?

Because paying the ransom often won’t solve any problems.

As Tom explains it, you’re dealing with criminals, after all. So, they will often double the ransom after you pay the initial amount, having realized that you have the money. Or, they’ll simply take the money and run without giving you the decryption keys.

So, ongoing threat intelligence sharing should be among the top priorities for an organization, as it allows them to evade the last-resort scenario of paying the ransom.

6. Invest in Backups and Disaster Recovery

According to Venicia, backups and disaster recovery have a massive role to play in combating ransomware. She says that the primary reason organizations choose to pay the ransom is because they don’t have any backups in place. In other words, they don’t have an alternative way to get their data back.

That’s precisely what Tom has experienced working with many small and medium-sized businesses.

He says that these businesses usually don’t have disaster recovery procedures and data backups because they find them to be too expensive. Other times, they’ll say they didn’t have the time to deal with these measures. But whatever the excuse may be, one thing’s for sure – having no backups leaves you vulnerable to losing your data permanently in a ransomware attack.

According to Tom and Venicia, here’s what an ideal proactive approach to cybersecurity would look like.

Step No. 1 – Have regularly scheduled backups and ensure they’re stored in different environments, including offline ones. Tom suggests the 3-2-1 data backup strategy – have three copies of your data on two different mediums (e.g., hard drives and DVDs) with one copy off-site (a different physical location).

Step No. 2 – Regularly test your backups to see whether they’re able to handle different scenarios.

Step No. 3 – Implement a disaster recovery plan that outlines the steps for different types of incidents. Of course, these incidents shouldn’t only cover ransomware. Earthquakes, floods, and even meteor strikes should be considered in your plan. The last part might seem silly to you. In fact, it also sounded silly to Tom and his colleagues. That is, at least, until a meteor struck Russia in 2013. So, you never know!

The Importance of Cybersecurity Specialists

Most of the strategies for combating ransomware require one thing – a skilled cybersecurity specialist to execute them. This is also what most companies lack, which is why they easily fall victim to cyberattacks.

That’s why programs like the Enterprise Cybersecurity Master’s program at OPIT are essential for the future of cybersecurity. This program helps train the next generation of cybersecurity professionals to defend organizations against the so-called “Ransomware Armageddon” and any other cyber threat that might emerge.

Related posts

OPIT Supporting a New Generation of Cybersecurity Leaders
OPIT - Open Institute of Technology
OPIT - Open Institute of Technology
Aug 28, 2025 5 min read

The Open Institute of Technology (OPIT) began enrolling students in 2023 to help bridge the skills gap between traditional university education and the requirements of the modern workplace. OPIT’s MSc courses aim to help professionals make a greater impact on their workplace through technology.

OPIT’s courses have become popular with business leaders hoping to develop a strong technical foundation to understand technologies, such as artificial intelligence (AI) and cybersecurity, that are shaping their industry. But OPIT is also attracting professionals with strong technical expertise looking to engage more deeply with the strategic side of digital innovation. This is the story of one such student, Obiora Awogu.

Meet Obiora

Obiora Awogu is a cybersecurity expert from Nigeria with a wealth of credentials and experience from working in the industry for a decade. Working in a lead data security role, he was considering “what’s next” for his career. He was contemplating earning an MSc to add to his list of qualifications he did not yet have, but which could open important doors. He discussed the idea with his mentor, who recommended OPIT, where he himself was already enrolled in an MSc program.

Obiora started looking at the program as a box-checking exercise, but quickly realized that it had so much more to offer. As well as being a fully EU-accredited course that could provide new opportunities with companies around the world, he recognized that the course was designed for people like him, who were ready to go from building to leading.

OPIT’s MSc in Cybersecurity

OPIT’s MSc in Cybersecurity launched in 2024 as a fully online and flexible program ideal for busy professionals like Obiora who want to study without taking a career break.

The course integrates technical and leadership expertise, equipping students to not only implement cybersecurity solutions but also lead cybersecurity initiatives. The curriculum combines technical training with real-world applications, emphasizing hands-on experience and soft skills development alongside hard technical know-how.

The course is led by Tom Vazdar, the Area Chair for Cybersecurity at OPIT, as well as the Chief Security Officer at Erste Bank Croatia and an Advisory Board Member for EC3 European Cybercrime Center. He is representative of the type of faculty OPIT recruits, who are both great teachers and active industry professionals dealing with current challenges daily.

Experts such as Matthew Jelavic, the CEO at CIM Chartered Manager Canada and President of Strategy One Consulting; Mahynour Ahmed, Senior Cloud Security Engineer at Grant Thornton LLP; and Sylvester Kaczmarek, former Chief Scientific Officer at We Space Technologies, join him.

Course content includes:

  • Cybersecurity fundamentals and governance
  • Network security and intrusion detection
  • Legal aspects and compliance
  • Cryptography and secure communications
  • Data analytics and risk management
  • Generative AI cybersecurity
  • Business resilience and response strategies
  • Behavioral cybersecurity
  • Cloud and IoT security
  • Secure software development
  • Critical thinking and problem-solving
  • Leadership and communication in cybersecurity
  • AI-driven forensic analysis in cybersecurity

As with all OPIT’s MSc courses, it wraps up with a capstone project and dissertation, which sees students apply their skills in the real world, either with their existing company or through apprenticeship programs. This not only gives students hands-on experience, but also helps them demonstrate their added value when seeking new opportunities.

Obiora’s Experience

Speaking of his experience with OPIT, Obiora said that it went above and beyond what he expected. He was not surprised by the technical content, in which he was already well-versed, but rather the change in perspective that the course gave him. It helped him move from seeing himself as someone who implements cybersecurity solutions to someone who could shape strategy at the highest levels of an organization.

OPIT’s MSc has given Obiora the skills to speak to boards, connect risk with business priorities, and build organizations that don’t just defend against cyber risks but adapt to a changing digital world. He commented that studying at OPIT did not give him answers; instead, it gave him better questions and the tools to lead. Of course, it also ticks the MSc box, and while that might not be the main reason for studying at OPIT, it is certainly a clear benefit.

Obiora has now moved into a leading Chief Information Security Officer Role at MoMo, Payment Service Bank for MTN. There, he is building cyber-resilient financial systems, contributing to public-private partnerships, and mentoring the next generation of cybersecurity experts.

Leading Cybersecurity in Africa

As well as having a significant impact within his own organization, studying at OPIT has helped Obiora develop the skills and confidence needed to become a leader in the cybersecurity industry across Africa.

In March 2025, Obiora was featured on the cover of CIO Africa Magazine and was then a panelist on the “Future of Cybersecurity Careers in the Age of Generative AI” for Comercio Ltd. The Lagos Chamber of Commerce and Industry also invited him to speak on Cybersecurity in Africa.

Obiora recently presented the keynote speech at the Hackers Secret Conference 2025 on “Code in the Shadows: Harnessing the Human-AI Partnership in Cybersecurity.” In the talk, he explored how AI is revolutionizing incident response, enhancing its speed, precision, and proactivity, and improving on human-AI collaboration.

An OPIT Success Story

Talking about Obiora’s success, the OPIT Area Chair for Cybersecurity said:

“Obiora is a perfect example of what this program was designed for – experienced professionals ready to scale their impact beyond operations. It’s been inspiring to watch him transform technical excellence into strategic leadership. Africa’s cybersecurity landscape is stronger with people like him at the helm. Bravo, Obiora!”

Learn more about OPIT’s MSc in Cybersecurity and how it can support the next steps of your career.

Read the article
How Regenerative Business Models Are Redefining Innovation and Sustainability
OPIT - Open Institute of Technology
OPIT - Open Institute of Technology
Aug 18, 2025 6 min read

Open Institute of Technology (OPIT) masterclasses bring students face-to-face with real-world business challenges. In OPIT’s July masterclass, OPIT Professor Francesco Derchi and Ph.D. candidate Robert Mario de Stefano explained the principles of regenerative businesses and how regeneration goes hand in hand with growth.

Regenerative Business Models

Professor Derchi began by explaining what exactly is meant by regenerative business models, clearly differentiating them from sustainable or circular models.

Many companies pursue sustainable business models in which they offset their negative impact by investing elsewhere. For example, businesses that are big carbon consumers will support nature regeneration projects. Circular business models are similar but are more focused on their own product chain, aiming to minimize waste by keeping products in use as long as possible through recycling. Both models essentially aim to have a “net-zero” negative impact on the environment.

Regenerative models are different because they actively aim to have a “net-positive” impact on the environment, not just offsetting their own use but actively regenerating the planet.

Massive Transformative Purpose

While regenerative business models are often associated with philanthropic endeavors, Professor Derchi explained that they do not have to be, and that investment in regeneration can be a driver of growth.

He discussed the importance of corporate purpose in the modern business space. Having a strong and clearly stated corporate purpose is considered essential to drive business decision-making, encourage employee buy-in, and promote customer loyalty.

But today, simple corporate missions, such as “make good shoes,” don’t go far enough. People are looking for a Massive Transformational Purpose (MTP) that can take the business to the next level.

Take, for example, Ben & Jerry’s. The business’s initial corporate purpose may have been to make great ice cream and serve it up in a way that people will enjoy. But the business really began to grow when they embraced an MTP. As they announced in their mission statement, “We believe that ice cream can change the world.” Their business activities also have the aim of advancing human rights and dignity, supporting social and economic justice, and protecting and restoring the Earth’s natural systems. While these aims are philanthropic, they have also helped the business grow.

RePlanet

Professor Derchi next talked about RePlanet, a business he recently worked to develop their MTP. Founded in 2015, RePlanet designs and implements customized renewable energy solutions for businesses and projects. The company already operates in the renewable energy field and ranked as the 21st fastest-growing business in Italy in 2023. So while they were already enjoying great success, Derchi worked with them to see if actively embracing a regenerative business model could unlock additional growth.

Working together, RePlanet moved towards an MTP of building a greener future based on today’s choices, ensuring a cleaner world for generations. Meeting this goal started with the energy products that RePlanet sells, such as energy systems that recover heat from dairy farms. But as the business’s MTP, it goes beyond that. RePlanet doesn’t just engage suppliers; it chooses partners that share its specific values. It also influences the projects they choose to work on – they prioritize high-impact social projects, such as recently installing photovoltaic energy systems at a local hospital in Nigeria – and how RePlanet treats its talent, acknowledging that people are the true energy of the company.

Regenerative Business Strategies

Based on work with RePlanet and other businesses, Derchi has identified six archetypal regenerative business strategies for businesses that want to have both a regenerative impact and drive growth:

  • Regenerative Leadership – Laying the foundation for regeneration in a broader sense throughout the company
  • Nature Regeneration – Strategies to improve the health of the natural world
  • Social Regeneration – Regenerating human ecosystems through things such as fair-trade practices
  • Responsible Sourcing – Empowering and strengthening suppliers and their communities
  • Health & Well-being – Creating products and services that have a positive effect on customers
  • Employee Focus – Improve work conditions, lives, and well-being of employees.

Case Studies

Building on the concept of regenerative business models, Roberto Mario de Stefano shared other case studies of businesses that are having a positive impact and enjoying growth thanks to regenerative business models and strategies.

Biorfarm

Biorfarm is a digital platform that supports small-scale agriculture by creating a direct link between small farmers and consumers. Cutting out the middleman in modern supply chains means that farmers earn about 50% more for their produce. They set consumers up as “digital farmers” who actively support and learn about farming activities to promote more conscious food consumption.

Their vision is to create a food economy in which those who produce food and those who consume it are connected. This moves consumers from passive cash cows for large corporations that prioritize profits over the well-being of farmers to actively supporting natural production and a more sustainable system.

Rifo Lab

Rifo Lab is a circular clothing brand with the vision of addressing the problem of overproduction in the clothing industry. Established in Prato, Italy, a traditional textile-producing area, the company produces clothes made from textile waste and biodegradable materials. There are no physical stores, and all orders must be placed online; everything is made to order, reducing excess production.

With an eye on social regeneration, all production takes place within 30 kilometers of their offices, allowing the business to support ethical and local production. They also work with companies that actively integrate migrants into the local community, sharing their local artisan crafts with future generations.

Ogyre

Ogyre is a digital platform that allows you to pay fishermen to fish for waste. When fishermen are out conducting their livelihood, they also collect a significant amount of waste from the ocean, especially plastic waste. Ogyre arranges for fishermen to get paid for collecting that waste, which in turn supports the local fishing communities, and then transforms the waste collected into new sustainable products.

Moving Towards a Regenerative Future

The masterclass concluded with a Q&A session, where it explained that working in regenerative businesses requires the same skills as any other business. But it also requires you to embrace a mindset where value comes from giving and that growth is about working together for a better future, and not just competition.

Read the article