Ransomware response planning requires stakeholders to coordinate response and recovery effort. We recommend running two tabletop planning sessions to design and improve ransomware response workflows and runbooks. Design the first session to document the response of technology teams; design the second to guide the leadership team through the non-technical questions they should keep in mind to play their part in the recovery effort.
Use this guide in conjunction with the project blueprint Build Resilience Against Ransomware Attacks and the associated tabletop planning session templates. We recommend that you share the questions with the leadership team before the tabletop planning session to help them prepare for the engagement.