Ransomware: What Now? The Coalition’s Incident Response Playbook

Two new episodes of the Coalition’s podcast are now available, focusing on the Ransomware Incident Response Playbook developed by the Cyber Incident Detection and Response (CIDR) Focus Group. Spread over two parts, the series explores what the playbook is and how it can be used in practice, before delving into the six key phases of a ransomware response — Prepare, Identify, Contain, Eradicate, Recovery and Lessons Learned. The episodes offer concrete guidance on what to do when an attack occurs, from early detection and system isolation to communication, recovery and post incident review.