Eden Winokur and James Finlay, from Coveware, a ransomware incident response company, discuss one of the biggest cybersecurity questions: should you pay a ransomware demand? They outline the scenarios where organisations may consider a payment, why cyber criminals are not to be trusted, the regulators’ view, including where it is a criminal offence to pay a ransom demand, and Australia’s mandatory ransom payment reporting regime, the first of its kind in the world.