Sam de Vries led a tabletop exercise of the Ransomware recovery plan with Hans Overbeek, Roos van Beek, Lotte van Dijk, and Thijs Bosman. The scenario: ransomware encrypts the file servers of several customers on the managed hosting platform on a Monday morning.
The group walked through isolation, the declaration of the Incident, the message to customers, and the restore from backups in order. The plan held. Open points were who decides on customer notice, an outdated contact list, and the order of the restore. They were taken up in the next monthly meeting.
Their words were deleted. Press Ctrl+Z to bring them back.