What is a Ransomware Readiness assessment?
A Ransomware Readiness assessment checks whether your business could recover from ransomware without paying: how an attacker would get in, how far they could move, and whether your backups and response plan would hold.
Ransomware is rarely a surprise to the attacker. They get in through a stolen password or an exposed service, take time to find the backups and administrator accounts, and then lock everything at once.
What decides how bad the day is has little to do with the ransom note. It comes down to whether you can recover without paying, and how long that takes.
This assessment looks at the whole chain. We check how an attacker would get in, how far they could move and whether your backups and response plan would hold. The aim is a business that can restore on its own terms.
Who needs it?
- A business that has never rehearsed a recovery
- A company that assumes its backups would work
- A team whose insurer asked about ransomware controls
- An owner who wants to know the realistic downtime from a bad day
What problems does it address?
- Not knowing whether you could recover without paying
- Backups an attacker could reach and encrypt along with everything else
- Administrator accounts that would hand an attacker the whole network
- A response plan that has never been tested
What we assess
- Backups, and whether they are protected from the same attack
- Restoration, including how long it would really take
- Privileged accounts and how an attacker could use them
- Endpoint controls
- Identity and sign-in protection
- Network segmentation
- Remote access
- Incident response planning and who does what
- Systems the business cannot run without, and what they depend on
What you receive
- A readiness summary written for a business owner
- The specific paths an attacker would likely use against you
- Gaps in recovery, ranked by impact
- Fixes ordered by effort and benefit
- A starting outline for an incident response plan
What happens afterward?
You decide what to do with the findings, and with whom. Your team or IT provider can carry them out, with Avertix guiding the changes and retesting them if you want, or you can keep senior help on hand through an advisory arrangement. Many clients stop after the report.
How the engagement works
Free consultation
A 45-minute call with a senior consultant about your situation. It is a conversation, not an assessment. You leave with a recommended next step.
Scope and price
Scope, deliverables and price are agreed in writing before any work starts.
Assessment
The consultant who scoped the work does it. Requests to your team stay small, and we work with your IT provider where you have one.
Findings and walkthrough
You get a written report and a walkthrough. Findings are ranked, so you know what to do first and what can wait.
