Ransomware First Hour Card
When ransomware hits, people panic, and the wrong move in the first hour can lock up your backups and make recovery harder. This one-page card tells whoever is in the office exactly what to do, so your firm can recover faster.
- Give everyone in the office a clear plan, so nobody has to guess
- Help keep ransomware from spreading to your server and backups
- Have your IT, insurance, and bank numbers in one place before you need them
- Avoid the mistakes that can hurt your insurance claim
- Print it once, post it by the phone, and you're ready
- Written for whoever is there, not just IT
Get My Free Card
Free 1-page PDF, emailed to you right away. Fill in your numbers and post it today.
What to Do in the First Hour, Step by Step
Disconnect
Unplug the network cable and turn off Wi-Fi on affected machines. Don't power them off.
Don't Pay or Reply
Don't click the ransom note, contact the attackers, or try to fix it yourself.
Call Your IT Provider
The first call to make, with a line to write in your provider's number.
Call Your Insurer
Most cyber policies require fast notice. A late call can affect your claim.
Protect the Backups
Keep your backups disconnected so they don't get encrypted too.
Write It Down
What to record: the time, what you saw, and who you've called.
Want to Make Sure You Never Need It?
We're Aspen IT Group, the IT team for architecture, engineering, and construction firms in East Tennessee. We'll review your backups and security and show you where ransomware could get in. No cost, no obligation.