# Ransomware Readiness Assessment

> From $30K · Managed Security & Incident Response · https://cisomarketplace.services/services/ransomware-readiness-assessment

Evaluate your organization's ability to prevent, detect, and recover from sophisticated ransomware attacks. Our assessment identifies critical gaps in ransomware defense and provides a clear roadmap for enhancing resilience.

## In scope

- Email security controls
- Endpoint protection assessment
- Network segmentation review
- Backup and recovery systems
- Active Directory security
- User awareness evaluation
- Privileged access management

## Deliverables

- Ransomware defense report
- Technical control recommendations
- Recovery capability assessment
- Remediation roadmap
- Tabletop scenario results
- Incident response playbook updates

## Tiers

### Essential Ransomware Defense: $30K

Control review for up to 500 employees and 1 location with one AD forest: email security, endpoint protection, segmentation, backups, AD and privileged access, by configuration review and interviews. Report and remediation roadmap.

Limits: employees 500, locations 1

Includes:
- Review of the 7 ransomware control areas
- Backup and recovery capability review on paper
- Active Directory security configuration review
- Ransomware defense report
- Remediation roadmap

Excludes:
- Tabletop exercise
- Hands-on restore testing
- Attack simulation
- IR playbook updates

### Enhanced Ransomware Protection Program: $55K

Up to 2,500 employees and up to 3 locations. Adds 1 ransomware tabletop scenario for up to 20 participants, observed restore tests of up to 3 critical systems, a user awareness evaluation, and updates to the existing IR playbook.

Limits: employees 2500, locations 3, scenarios 1, participants 20

Includes:
- Everything in the basic tier
- 1 ransomware tabletop scenario
- Observed restore tests of up to 3 critical systems
- User awareness evaluation
- Updates to the existing IR playbook

Excludes:
- Ransomware attack simulation in the environment
- A new custom playbook written from scratch
- Remediation implementation

### Complete Anti-Ransomware Solution: $85K

No fixed employee cap - scoped at kickoff; up to 10 locations. Adds ransomware attack simulation with non-destructive techniques, restore validation of up to 8 critical systems, 2 tabletop scenarios for up to 40 participants, and a custom playbook.

Limits: locations 10, scenarios 2, participants 40

Includes:
- Everything in the enhanced tier
- Non-destructive ransomware attack simulation
- Restore validation of up to 8 critical systems
- 2 tabletop scenarios (technical and executive)
- Custom ransomware response playbook

Excludes:
- Remediation implementation
- Incident response retainer
- Ransom negotiation services

## Terms

Starting price shown is the lowest published tier. A written proposal fixes scope, tier and price before anything is signed. Timeline is set in the SOW.

Scope this engagement: https://cisomarketplace.services/scope?service=ransomware-readiness-assessment