A Plain-English Ransomware Readiness Checklist

Ransomware is malicious software that locks your files and demands payment. The good news is that a few basic protections make a big difference. Use this checklist to see where you stand.

Protect the front door

• Is multi-factor authentication on for email and remote access? Stolen passwords are a common way in. MFA blocks most of those attempts.
• Is email filtered for phishing and dangerous attachments? Email is the most common delivery route.
• Do staff get regular security awareness training? A short refresher helps people spot suspicious messages.

Protect the devices

• Do all computers run managed endpoint protection? Modern tools detect suspicious behavior, not just known viruses.
• Are systems patched on a schedule? Attackers target known flaws that updates fix.
• Does anyone have more access than they need? Limiting admin rights limits damage.

Be able to recover

• Do you have backups of servers, computers and Microsoft 365?
• Is at least one copy stored off-site or protected from deletion? Attackers often try to erase backups.
• When did you last test a restore? Testing proves the backup works and shows how long recovery takes.

Have a plan

• Do you know who to call, and what to do first, if you suspect an attack? A one-page response plan saves time when it matters.

Scoring yourself

If you answered no to several of these, start with MFA, tested backups and endpoint protection. They give the biggest protection for the effort. CTEKS offers a free assessment that checks these areas and gives you a plain-English list of priorities. Request a free assessment.

Keep reading

• Business Backup and Disaster Recovery Guide
• Cybersecurity Priorities for Small Business in 2026
• Healthcare IT Support and Cybersecurity Guide

More guides are in our knowledge base. Prefer to talk it through? See our support plans or call (847) 200-3666.