Self-check

Ransomware Readiness Scorecard

Score each line as in place, partial, or missing. The goal is a short, honest list of gaps, not a perfect score.

Download the scorecard (CSV)

01

Prevention

  • MFA on all administrator and remote-access accounts
  • Patching process with named owners
  • Email filtering and phishing reporting in place
  • Least-privilege access reviewed on a schedule

02

Detection

  • Someone is accountable for reviewing security alerts
  • Identity and email signals are monitored
  • Endpoint protection is deployed and reporting
  • After-hours alert handling is defined

03

Response

  • Written steps for isolating affected systems
  • Contacts for IT, leadership, insurer, and legal
  • Authority to contain is agreed in advance
  • Communication plan for staff and clients

04

Recovery

  • Backups are separate from the production network
  • Restores have been tested and timed
  • Critical systems are ranked by recovery priority
  • Business continuity contacts are current