SECURITY · RANSOMWARE RESILIENCE
Get proof of what actually restores from your backups, and how long a ransomware recovery would take.
A fixed-fee assessment that tests your Microsoft 365 data and your backups, measures a realistic recovery time, and maps the blast radius across identity and infrastructure, so recovery is proven, not assumed.
The deliverable
Ransomware Blast-Radius Map, on your desk
A representative deliverable. Yours is built on your own environment, with names and figures redacted here.
This is for you if
Built for the Owner, IT Director, or CISO.
The board or a cyber insurer asked whether you could recover from ransomware. Backups exist but nobody has tested what actually restores. You need a realistic recovery time you can stand behind.
What you receive
Ransomware Blast-Radius Map
How far an attack would spread, which staff logins it takes over, and which servers those logins open up.
Restore Proof Pack
What restores, how fast, and what still hurts, with the recovery time measured from your own restore records.
Prioritized resilience roadmap
The gaps to close first, ranked by impact.
Typical timeline
1-2 weeksIncluded
- Restore evidence for Microsoft 365 and backup data, with a controlled test restore where the statement of work includes one
- Blast-radius map
- Measured recovery time
- Prioritized resilience roadmap
Assumptions
- Your own restore history and recovery documentation are available to review
Not included
- Full disaster-recovery implementation (scoped separately)
- Production failover
Scoped separately here: Fix & improve.
Required access
- Read-only access to backup and Microsoft 365 admin
- A test target, if a controlled restore is in scope
- A 30-minute kickoff with IT
Engagement complete when
The engagement is complete when the blast-radius map, restore proof pack, and resilience roadmap are delivered and walked through.
Give the board and the insurer a measured recovery time instead of a guess.
One fixed fee, agreed in writing before any access is granted. The timeline above is the whole engagement, and what you keep is documentation your team can act on. One senior engineer scopes and delivers it.
The fee depends on what is actually in your environment rather than your headcount. The scope-fit check tells you where you land →