WHAT YOU WILL LEARN
Learning objectives
- Know your response contact before an incident.
The useful habit
Ransomware incidents can involve encryption, data theft and operational disruption. Prepared response contacts and tested recovery reduce confusion when a warning appears.
Apply it
An unexpected ransom note appears on a work device. Report it, preserve context and follow isolation instructions.
APPLIED EXAMPLE
Put it in context
An unexpected ransom note appears on a work device. Report it, preserve context and follow isolation instructions.
Illustrative scenario for learning, not a claim about a verified customer incident.Common mistakes
- Acting on urgency before verifying the request
Your practical checklist
Checklist ticks are temporary and are not recorded as account progress.
MINI RECAP
Know your response contact before an incident.
Put your understanding to the test.
OPTIONAL NEXT STEP · PRO
Practise the first-response decisions.
The released ransomware lab asks you to weigh containment, evidence preservation and recovery priorities, then compare your reasoning with worked reviews.
See the ransomware response lab →
Your current Pro membership is recognised. Open your Pro collection or manage your existing membership.
Recurring membership. Both plans include the same available Pro collection. Compare the complete offer.
Already a member? Log in or manage your membership before purchasing again.
Free lessons, quizzes and Simulation A stay free.