Ransomware Readiness Bootcamp

Who it’s for

This bootcamp is for owners, managers and IT leads who want to be ready for ransomware before it happens. It assumes you understand the basics, such as what MFA and backups are, and builds on them. If you are new to security, start with Small Business Cybersecurity for Beginners first.

• Businesses that could not operate for long without their files, email or line-of-business apps
• Teams answering cyber insurance questions about backups and incident response
• Managed service clients who want to understand and check what their provider is doing
• Anyone who has had a close call and wants a proper plan

What you’ll learn

Ransomware is rarely a single event. It usually starts with a stolen password, a phishing email or an unpatched system, and the attacker may be inside for some time before anything is encrypted. This bootcamp follows that timeline and shows you where to break it.

• How modern ransomware attacks unfold, including data theft and extortion
• How to shrink your attack surface by closing exposed services and tightening accounts
• How to design backups using the 3-2-1-1-0 approach, including offline or immutable copies
• How to harden endpoints and admin accounts so one infected laptop does not take down everything
• How to recognize early warning signs and act before encryption starts
• How to respond, communicate, recover and report if an attack succeeds

How it works

The bootcamp combines short video lessons with practical worksheets. As you progress you will complete a backup and restore test, fill in your own ransomware response playbook and assign clear roles to the people involved. Nothing here requires specialist tools; most steps use features already built into the systems you have.

The final module is a tabletop exercise: a guided, discussion-based drill you run with your team in about an hour. The kit includes a facilitator script, scenario cards and a short debrief form, so you can repeat the exercise each year. The program also points you to official guidance, including CISA’s StopRansomware resources and reporting through the FBI’s IC3.

What you get

• About five hours of on-demand video lessons
• An editable ransomware response playbook template
• A tabletop exercise kit with facilitator script and scenario cards
• A backup and restore testing log
• A certificate of completion
• 12 months of access, including content updates

Want help building or testing your plan? Our vCISO advisory can facilitate the exercise with you. For background reading, see our guide to ransomware prevention and recovery.