Review your ransomware readiness, document the gaps and organize the next steps. Turn scattered evidence into a clearer, prioritized readiness action plan.

A clearer way to review ransomware readiness

Ransomware preparedness involves more than installing security tools. Organizations need to understand how well their people, processes and technology support prevention, detection, response and recovery. Important questions can span identity and access, endpoint and vulnerability management, backup protection, restoration, incident coordination, business continuity, evidence and decision-making. Without a consistent review method, evidence can be scattered across teams and improvement actions may lack clear ownership or follow-through.

A working assessment, not just reading material

The Ransomware Readiness Checklist & Action Tracker gives teams a structured starting point for reviewing their current arrangements. It helps participants record assessment status, capture evidence references and context, describe findings or gaps, and organize actions for follow-up. The 64 assessment items use stable identifiers to make it easier to refer to specific observations and track them over time. The checklist is intended to support discussion and practical review, not to imply that every item applies equally to every organization.

How to use the toolkit

Start with the guide and agree the assessment scope, participants and review date. Gather the policies, plans, configuration records, backup and recovery evidence, incident procedures and other information available to your organization. Work through the checklist and record each item's status and supporting evidence in the editable workbook. Where an item needs attention, document the finding, set a priority appropriate to your own context, and record an action, owner and target date where assigned. Review the results with relevant stakeholders, use the management summary to communicate key gaps and decisions, and revisit the action list periodically or after material changes or incidents. Retain dated assessment snapshots so progress can be compared without overwriting the historical record.

What is included

The customer package contains a Start Here guide, the ransomware readiness checklist, an editable assessment and action-tracking workbook, a separate sample workbook populated with clearly fictional illustrative data, quick-reference and response prompt cards, a management summary template, 25 frequently asked questions, an authoritative source guide, and a product value and scope brief. A marketing poster is also included. The clean workbook is intended for the customer's own assessment; use the sample workbook to understand the workflow before entering organizational information.

Who it is for

The toolkit is designed for security and IT teams, risk and governance owners, business continuity stakeholders and management. Organizations of different sizes can adapt the depth of review to their operating environment, resources and risk context. Cross-functional participation can help connect technical readiness with business decisions and recovery priorities.

Interpreting the results responsibly

The workbook uses status and priority fields to help organize work. Its completion indicator describes workflow completion; it is not a validated risk score, security rating or compliance score. The source guide helps users identify relevant public guidance, but organizations must verify current references and assess how they apply to their environment and jurisdiction.

This RASA InfoCom resource is for general informational and planning purposes. It is not legal advice, a formal audit, certification, penetration test, vulnerability scan, incident-response service or guarantee of ransomware prevention or recovery. Completing the checklist does not establish compliance or eliminate risk. For teams that need a practical starting point to document readiness, make gaps visible and coordinate improvement work, this toolkit offers an editable structure without requiring them to begin with a blank page.