The Colonial Pipeline attack and another which severely disrupted the Irish Health Service have one thing in common (beyond being despicable): they were both the result of ransomware-as-a-service (RaaS) operations. 

This area of criminal cooperation has become the norm for threat actors, but what are the business mechanics at play? How does it change the risk to business? And can it survive these high-profile attacks on critical infrastructure?