Public-Private Partnerships (PPPs) to Combat Ransomware: an Inquiry into Three Case Studies and Best Practices

The Institute for Security and Technology (IST) conducted this research with the support of the Global Forum for Cyber Expertise (GFCE), with funding from the Governments of Spain and the United States.

This research aims to provide guidance for governments on how to set up or improve their fight against ransomware through public-private partnerships.

It examines three case studies from 1 – Europol’s Cyber Crime Centre (EC3), 2 – The Joint Cyber Defense Collaborative (JCDC) established by the Cybersecurity and Infrastructure Security Agency (CISA), 3 – The Ransomware Task Force (RTF), convened by the Institute for Security and Technology in order to offer practical advise based on best practices and lessons learned on key areas such as:

• • How to include a relevant range of stakeholders
  • Catalyze effective information-sharing
  • Build trust through clear expectations and person-to-person collaboration
  • Learn to navigate hurdles within the PPP

Finally, it also provides a brief step-by-step guide on how to establish a partnership to mitigate ransomware and other cyber threats.