Business Continuity and Crisis Management

Ransomware Readiness and Recovery

Ransomware attacks can halt operations within hours and threaten sensitive data. This course covers ransomware readiness: how attacks unfold, prevention controls, backup and recovery design, incident response playbooks, decision making on ransom demands, legal and regulatory duties, communication and recovery.

5 days Classroom or live online English

Smart Horizon Certified - Global Leadership Consultants

Take the course details with you.

Download the full standard outline: why attend, methodology, objectives, audience, competencies, the daily outline and current plans.

Download course PDF

Why attend

From knowledge to real-world impact.

Organisations that prepare for ransomware recover faster and pay less. You will learn practical readiness and response measures.

Workplace challenges

Professional Problems This Course Is Designed to Solve

The programme explores practical approaches to the following challenges. Results depend on how the learning is applied in your organisation.

Difficulty translating subject knowledge into practical workplace decisions.
Inconsistent approaches to the activities covered in the course outline.
Lack of a structured plan for applying and reviewing new skills.

Course methodology

How you will learn.

Attack walkthroughs, readiness assessments, playbook development and crisis simulations.

Course objectives

What you'll take away.

By the end of this course, participants will be able to:

Explain how ransomware attacks unfold
Implement key preventive controls
Design backups resilient to ransomware
Develop ransomware response playbooks
Make informed decisions under extortion
Manage legal, communication and recovery steps

Target audience

Who should attend.

This course is suitable for:

IT and security managers
Business continuity managers
Crisis team members
Risk and compliance professionals
Senior executives

Target competencies

Capabilities you will build.

Participants will develop competencies in:

Threat understanding
Preventive controls
Backup resilience
Incident response
Crisis decision making

Course outline

Your learning journey.

A focused, practical outline with time to explore, apply and reflect.

Day 1Ransomware Threat

09:00–10:08Attack life cycle
10:08–11:00Case studies
11:00–11:30Coffee break
11:30–11:45Case studies (continued)
11:45–12:53Impacts
12:53–14:00Exercise

Day 2Prevention

09:00–10:08Access and patching
10:08–11:00Email and endpoint
11:00–11:30Coffee break
11:30–11:45Email and endpoint (continued)
11:45–12:53Segmentation
12:53–14:00Workshop

Day 3Backups

09:00–10:08Immutable and offline backups
10:08–11:00Restore testing
11:00–11:30Coffee break
11:30–11:45Restore testing (continued)
11:45–12:53Recovery priorities
12:53–14:00Exercise

Day 4Response

09:00–10:08Playbooks
10:08–11:00Containment
11:00–11:30Coffee break
11:30–11:45Containment (continued)
11:45–12:53Ransom decisions
12:53–14:00Simulation

Day 5Legal and Recovery

09:00–10:08Notification duties
10:08–11:00Communication
11:00–11:30Coffee break
11:30–11:45Communication (continued)
11:45–12:53Recovery and lessons
12:53–14:00Action plan

The timings provided are estimates and may vary depending on the number of participants and the discussions taking place during the sessions. They are indicative only and do not constitute a binding commitment.

Dates & venues

Find a session that works for you.

Confirmed dates accept registration requests. Tentative dates are enquiry only.

Good to know

A few things to know.

How is the course delivered?

Our classroom programmes combine facilitated discussion, case studies, exercises and reflection. The precise format will be confirmed before enrolment.

Can you deliver this programme for our team?

Yes, you can enquire about a tailored programme. Share your goals, group size and preferred dates with our learning team.

Will I receive a certificate?

Participants who complete the programme receive a Smart Horizon certificate of attendance. Smart Horizon programmes are not externally accredited and do not award a professional qualification, licence or designation. Where a course title or outline refers to a professional certification (for example, AACE International's Certified Cost Professional), the programme supports learning and preparation only; the credential itself is awarded solely by the relevant professional body under its own application and examination requirements.

What should I confirm before booking travel?

Please confirm the session, exact venue, accessibility arrangements, fees and any visa requirements with the team before arranging travel. Tentative dates are not confirmed sessions.

Keep exploring

Your next horizon awaits.

All courses

The full course agenda and dates are available above. Use the session links in Dates & venues to choose a session. Registration and quotation forms require JavaScript; you can also contact our learning team directly.