The 10-minute ransomware readiness check.

You do not need a security team to improve your odds against ransomware. Set a timer for 10 minutes and answer the ten questions below. Each one is a yes or a no. Every no is a to-do.

1. Backups. Do you keep at least one backup copy that ransomware cannot reach? Look for offline copies or immutable ones, which cannot be changed or deleted for a set period.
2. Restore test. Have you restored files from that backup recently? A backup you have never restored is a hope, not a plan. Pick one folder and restore it this week.
3. Email protection. Is multi-factor authentication turned on for every email account? Start with email, because attackers use it to reset everything else.
4. Updates. Are Windows, Macs, browsers and your firewall getting updates? Replace anything the maker no longer supports.
5. Admin rights. Do daily user accounts run without administrator rights? Fewer admins means less damage when one account is tricked.
6. Phishing awareness. Does your team know what to do with a strange link or attachment? A short reminder every few months, and an easy way to report, goes a long way.
7. Remote access. Is remote desktop closed off from the open internet? If people work remotely, use a VPN or another managed gateway.
8. Endpoint protection. Does every computer run security software that updates itself, including laptops people use at home?
9. Accounts and access. Have accounts for former staff and vendors been removed, and do people only see the files they need?
10. Who to call. If your files were locked this morning, does everyone know who to call? Write down the numbers for your IT provider, your cyber insurance claims line and one decision maker. Keep a printed copy, because your systems may be down.

Count your noes. Fix the backup and email items first, because they matter most. If you are unsure how to answer any of these, we are happy to talk it through. We enjoy talking tech!