Free Ransomware Recovery Audit

If it hit tonight, how many hours until you are actually back online?

Go on. Give me a number.

Most people cannot. Ten questions, about three minutes, and an honest number at the end of it.

Start the audit

No email needed to begin. Just so I know who I am scoring.

Your name

Company

I need both before we start.

Why backups will not save youAdam Green, CISO 2 min 35

Adam Green, CISOTwenty odd years, and response through more than twenty live incidents and ransomware attacks.

Ten questions, about three minutes
Scored the second you finish
No call required, ever
The highest risk scores I review myself inside 24 hours

Who is actually getting hit

Not who you think.

43%

of attacks target small and mid sized businesses, because you are easier to breach than the big end of town.

ASD Annual Cyber Threat Report

41%

of attacks now hit healthcare and local government.

ASD Annual Cyber Threat Report

The part nobody likes to hear

Most of the victims who paid the ransom had backups. They paid anyway.

Backups prevent permanent data loss. They do not prevent operational shutdown.

The businesses that paid did it because restoring took two to four weeks, and they simply could not function.

The decision

72 hours

Pay the ransom, or lose everything. That is the choice, and it is decided long before the attack ever lands.

Decided by three things

Backups you have tested

Not backups you have. Backups you have actually restored from, recently, and timed.

Segmentation

So one machine does not take down the entire fleet.

A plan people have read

An incident response plan your team has actually tested, rather than one that exists.

The audit

Ten questions. Your real recovery time.

About three minutes. Scored the moment you finish, and there is no call to book to get the result. Add your name and company above and the questions open up here.

Question 0 of 10About 3 minutes

Critical exposure

Your estimated recovery time

Weeks

You scored 0 out of 20.

Get the full assessment

Question breakdown

For context

$1.1M

average ransom demand.

Sophos, global, 2024

14 days

average recovery time.

Source to be confirmed before this page carries paid traffic.

Ransomware is back at 2021 levels, and March this year was the highest volume of public cases ever recorded.

The person who reviews it

Most teams will tell you recovery is handled. Almost none of them have tested it.

I have been a CISO for twenty odd years and led response through more than twenty live incidents and ransomware attacks. I have sat in the room while a business worked out, in real time, that its recovery plan was fiction.

The highest risk scores I review personally within 24 hours, because those are the businesses one bad email away from a very long month.

Score well and you will know exactly why. Score badly and you will know exactly what to fix first, while you still have the time.

Adam Green presenting on ransomware recovery — Adam speaks on ransomware readiness and recovery across Australia and the Pacific.