eccf3bbb-4898-4928-8f6f-3ff2edad0898

So You Had a Ransomware Breach. Now What?

If your organization is targeted with ransomware, having a solid breach response plan in place can mean the difference between a quick recovery or suffering prolonged effects. Get this free seven-step ransomware resiliency checklist to help plan your company’s response and limit the severity of an attack.

Ransomware attacks increased 51% from 2020 to 2021, according to the FBI’s Internet Crime Complaint Center, resulting in an estimated $49.2 million in losses.

A well-designed breach response, legal counsel, and a robust communication plan, among other tools and tactics, can make the difference between returning your business to normal quickly, or prolonging the impact of ransomware far beyond the initial attack. This checklist from AuditBoard breaks down details on what InfoSec professionals can do during each of these steps to minimize damage in the event of an attack:

  • Activate your breach response plan.
  • Engage legal counsel.
  • Contact law enforcement.
  • Perform due diligence.
  • Make a decision on paying or denying the ransom demand.
  • Communicate with key stakeholders.
  • Document and act upon the lessons learned.

If your organization hasn’t developed a breach response plan, or you haven’t updated it recently, there’s no time like the present. When an attack happens, instead of spending valuable time developing a plan as it occurs, your organization can dedicate its time to plan execution. It’s also crucial to test your response plan at least annually to make sure all key stakeholders are aware of their role and identify any gaps. After all, practice makes perfect. While you cannot prevent every attack, you can control how you respond. Get your copy of the checklist and start preparing today.


By requesting this resource you agree to our terms of use. All data is protected by our Privacy Notice.

By submitting this form, you are confirming you are an adult of 18 years or older and you agree to AuditBoard contacting you with marketing-related emails or by telephone. You may unsubscribe at any time. AuditBoard websites and communications are subject to their Privacy Notice.