Could you survive a ransomware attack?

Eight questions, about two minutes. Answer honestly: "Partly" counts for half.

01Do you keep offline or immutable backups of critical systems, and have you tested a full restore?

Yes Partly No

02Is MFA enforced on email, VPN, remote desktop and every admin account?

Yes Partly No

03Are internet-facing systems patched within days of critical vulnerabilities being announced?

Yes Partly No

04Do endpoints and servers run EDR or equivalent protection that someone actually monitors?

Yes Partly No

05Are security logs centralised and kept long enough to investigate, ideally 90 days or more?

Yes Partly No

06Do you have an incident response plan with named roles, contacts and decision authority?

Yes Partly No

07Have you run a ransomware tabletop exercise with leadership in the last 12 months?

Yes Partly No

08Do you know your legal, regulatory and insurance notification duties after a breach?

Yes Partly No

Other readiness checks