Home / Resources / ISACA Journal / Issues / 2025 / Volume 6 / Unpacking Ransomware Response Through Human Decision Making

To Pay or Not to Pay: Unpacking Ransomware Response Through Human Decision Making

Computer screen displaying a warning sign, indicating a potential issue or alert for online users.
Author: Jeremy Treadwell
Date Published: 19 November 2025
Read Time: 9 minutes

As the digital superstorm of the fifth industrial revolution (5IR) reshapes the business landscape, internal audit must transform to maintain relevance. The reactive audit focused on the past should be replaced by a proactive one that delivers foresight, identifies future risk, and motivates innovation and digital transformation...

 

Members, login to keep reading.

Not a member but want to read more?
Explore ISACA member benefits today.

Additional resources

State of Cybersecurity 2025
Report

State of Cybersecurity 2024 Report

ISACA 2025 Cybersecurity Report: Workforce, AI adoption, and global risk trends

29 September 2025
Yakir Golan
Risk Article

Repositioning Cyberrisk Registers as Strategic Assets

Until cyberrisk registers evolve to adopt the more tangible language used to describe enterprise value, they will remain static documentation tools that are useful for compliance but inadequate for advancing organizational goals.

7 November 2025
Chris Moschovitis
Blog Post

Tool Sprawl: Why More Cyber Tools Make You Less Secure

An organization that has carefully maintained defenses and clear response protocols is more secure than one with a flashy collection of 'solutions' that lack proper management.

11 November 2025