Ransomware
Contain disruption. Make a recovery decision.
IT · Operations · LeadershipTEAM TRAINING
Don’t just have a plan.
Practise using it
together.
Use realistic cyber incident exercises to explore how your team applies your response plans, where responsibilities are unclear and what needs to improve.
Plan a training demoThe files won’t open.
A colleague reports that a shared folder is unreadable. The cause is not yet confirmed.
YOUR TEAM’S NEXT DECISION
What would you verify first, and who takes ownership?
Separate observations from assumptions. Agree who will verify the scope and what would trigger escalation.
More than ticking
a checklist.
Work through a developing scenario using your captured response plan. Record the action you would take and compare it with your procedures and guidance.
- Make the discussion relevantUse the business context and response instructions captured for your exercise.
- Give people a roleA facilitator leads, responders contribute and observers follow the discussion.
- Keep what you learnedReturn to saved decisions, complete the debrief and download the exercise record.
All events are simulated. No live actions or messages are performed.
CHOOSE YOUR NEXT REHEARSAL
Different incidents.
The same need for clarity.
Choose from eight scenario types. Rehearse with your response team, or start with a solo walkthrough.
Phishing
Follow a suspicious email from report to response.
IT · Response lead · ColleaguesPayment fraud
Challenge a convincing supplier impersonation.
Finance · IT · LeadershipData exposure
Work through uncertain access and reporting decisions.
Information owners · ITAccount compromise
Investigate suspicious sign-ins and secure access.
Identity administrators · Response leadMalware
Assess a suspicious device and plan safe containment.
IT · Device ownersLost device
Assess access, data exposure and business continuity.
IT · Information ownersService disruption
Coordinate the response to a possible denial-of-service attack.
IT · Providers · OperationsAN EXERCISE SHOULD HAVE A NEXT STEP
Practice becomes progress
when you follow up.
Build the response plan.
Bring together critical services, procedures, contacts, responsibilities and escalation routes for your business.
Put the plan into practice.
Use realistic exercises to test how your team applies the plan and discover what needs clarification.
Work through the incident.
Use the response plan to guide your team’s next steps. Keep decisions, notes and evidence in a shared record.
Feed learning back in.
Capture lessons, assign improvements and review your procedures before the next rehearsal or incident.
Exercise timestamps record contributions; they do not measure live response speed. Completion is not a readiness certification.
MAKE READINESS A WORKING HABIT
Bring your plans
and people together.
Explore how your response plans, team training and incident records can work together.
Plan your demo