Homework — Lesson 12
Two tasks · ~30 minutes · Applied to your own organisation
Task 1 — Draft your ransomware decision policy
Write a one-paragraph policy for your organisation: who decides, your backup posture, the legal and sanctions check, and how you communicate — all settled before any incident.
✓ Self-check: your policy names a decision-maker, states a backup/restoration position, and requires a legal/sanctions check before payment is even discussed.
Task 2 — Test the backup assumption
Find out when your backups were last successfully restored and how long it took. If the answer is "we don't know," that is your finding.
✓ Self-check: you have a real answer (date and duration) or have identified the gap and who owns closing it.
Task 3 (optional) — Name your crisis team
List who would be on your ransomware crisis team, who holds decision authority, and how they would be convened out of hours.
✓ Self-check: every role has a named person and there is a way to reach them after hours.