Ransomware Incident Response Checklist

Ransomware is a multi‑billion‑dollar global criminal industry. Although no two incidents are the same, this checklist, derived from our in-depth content and takeaways from a recent Incident Response Forum panel, offers some streamlined best response practices in the moments, hours and days that follow a ransomware attack. See our two-part series on lessons from the multinational takedown of Hive ransomware: A Broad Impact (Mar. 15, 2023), and Coordination and Defensive Priorities (Mar. 29, 2023).

To read the full article

Continue reading your article with an ACR subscription.