Ransomware Readiness Assessment

Ransomware succeeds when a few specific controls are missing: multi-factor authentication on remote access, protected backups, endpoint detection, or a plan for what to do when it hits. Our ransomware readiness assessment checks those controls against the NIST ransomware risk management profile (NIST IR 8374) and CISA guidance, and gives you a prioritized plan to close the gaps. It is one of our risk assessments.

What we assess

Prevention

Multi-factor authentication on email, remote access and administrator accounts
Exposed remote access such as RDP and VPN, and patching of internet-facing systems
Email security, phishing resilience and macro controls
Privileged access and administrator account hygiene

Detection and containment

Endpoint detection and response coverage and alert monitoring
Network segmentation that limits how far ransomware can spread
Logging and visibility into the early signs of an attack

Backup and recovery

We check whether your backups would survive an attack and how fast you could actually restore: immutable or offline copies, separate credentials, coverage of critical systems, and evidence of recent restore tests.

Response readiness

Incident response plan, roles and an out-of-band way to communicate
Cyber insurance requirements and contacts
Decision-making for ransom, legal and regulatory notifications

How Our Ransomware Readiness Assessment Works

Scoping & Kickoff

We agree on the systems and sites in scope, collect existing documentation and schedule interviews with IT and leadership.

Interviews & Evidence Review

We review configurations, policies and backup evidence, and interview the people who run and would recover your systems.

Technical Validation

We verify key controls, such as MFA coverage, exposed services and backup isolation, rather than relying on questionnaires alone.

Scored Report

You receive a scored assessment across prevention, detection, recovery and response, with a prioritized remediation roadmap and quick wins.

Remediation Support

We help you close the highest-risk gaps and can follow up with a tabletop exercise or penetration test to prove the improvements.

Know If You Could Recover

Schedule a call to assess your ransomware readiness and get a prioritized plan to close the gaps.

Get a Quote

Tell us what you need and a senior consultant will reply within one business day with next steps or a quote. Prefer to talk? Book a call.

Name

Work email

Company

Phone

What do you need?

Tell us a little about it

Frequently Asked Questions

What is a ransomware readiness assessment?

A focused review of the controls that prevent, detect and recover from ransomware, scored against recognized guidance such as NIST IR 8374, with a prioritized plan to fix what is missing.

How is this different from a penetration test?

A penetration test proves what an attacker can exploit. A ransomware readiness assessment reviews your whole defense, including backups, recovery and your response plan, which a penetration test does not cover. Many organizations do both.

Will this help with cyber insurance?

Yes. Insurers ask about many of the same controls, such as MFA, endpoint detection, backups and incident response planning. The report helps you answer those questions accurately and improve your position.

Do you test our backups?

We review backup configuration and evidence of restore testing, and we can observe or help plan a restore test. We do not perform destructive tests on production data.

How much does a ransomware readiness assessment cost?

Pricing depends on the size of your environment and the number of sites. We provide a fixed quote after a free scoping call.