A recent SEC Office of Investigations and Examinations cybersecurity risk alert focused on ransomware – a persistent and evolving threat to financial firms, as demonstrated by the recent attack on TCW Investment Management. In this guest article, Simon Eyres, a managing director at Drawbridge Partners, discusses the best practices identified by the alert to prevent, detect and mitigate the damage from ransomware attacks, and the threat environment in the financial services sector. See “Are You Prepared for OCIE’s Sweep of Business Continuity Plans and Coronavirus Actions?” (Jun. 10, 2020).