Security Assessment
Ransomware Readiness Assessment
An assessment of whether your business could recover from ransomware: backup coverage, immutability, recovery times, admin access and endpoint protection, proven with a sample restore.
- Backup coverage review across servers, cloud and Microsoft 365
- Recovery point and recovery time objectives (RPO / RTO) review
- Immutable and offline backup verification
Could you actually recover? We test it.
Overview
Almost every business has backups. Far fewer have checked that the backups cover everything that matters, that an attacker with admin rights could not delete them, and that a restore would finish in a time the business could survive.
The Ransomware Readiness Assessment answers those questions with evidence. We map what your business depends on, check how each system is protected and backed up, review the access an attacker would target, and perform a sample restore so the result is proven rather than assumed.
What is included
Everything in the engagement, in writing.
- Backup coverage review across servers, cloud and Microsoft 365
- Recovery point and recovery time objectives (RPO / RTO) review
- Immutable and offline backup verification
- Admin and privileged-access review
- Endpoint detection and response (EDR) review
- Recovery dependency map
- Sample restore test
- Executive report and remediation roadmap
What you get out of it
Outcomes you can hold us to.
- 01Proof of what you could recover, and how fast
- 02The gaps an attacker would exploit, closed in priority order
- 03A recovery plan the board and insurers can rely on
FAQ
Frequently asked questions
What is a ransomware readiness assessment?
It is a review of how well your business could withstand and recover from a ransomware attack. It covers backup coverage and immutability, recovery times, privileged access, endpoint protection and your recovery plan, and it includes a sample restore to prove backups work.
Will the restore test disrupt our systems?
No. The sample restore is made to an isolated location, not over your live systems, and it is scheduled with you in advance.
What do we get at the end?
An executive summary, a technical report with each finding and its fix, a recovery dependency map, the results of the restore test, and a prioritised remediation roadmap.
How much does it cost?
It is a fixed price based on the number of systems and sites in scope, agreed before we start.
Ready to move on Ransomware Readiness Assessment?
We will scope it against your actual environment, not a generic package, and give you a fixed price before any work starts.