A ransomware readiness checklist for small businesses

Ransomware locks files and demands payment, and small businesses are frequent targets because they often lack dedicated security staff. Preparation is far cheaper than recovery.

Reduce the chance of infection

Patch operating systems, browsers and remote access tools quickly. Require multi-factor authentication on email and remote logins, restrict administrator rights and filter email attachments. Remove anything exposed directly to the internet that does not need to be.

Make sure you can recover

Backups are your safety net, but only if attackers cannot reach them. Follow the 3-2-1 idea: three copies, on two types of storage, with one offline or immutable.

• Test restoring files and a full system on a schedule
• Keep backup credentials separate from your normal accounts
• Document the order in which systems should be restored

Have a plan before the incident

Write a short response plan with named decision makers and contacts for your IT provider, insurer and legal adviser. Keep a printed copy, because your systems may be unavailable. Law enforcement agencies generally discourage paying ransoms, because payment does not guarantee recovery and encourages more attacks.

Key takeaway: tested, isolated backups and a rehearsed plan turn a disaster into an inconvenience.