Review existing documentation
Unit 42 will develop an understanding of your processes, tools and capabilities while identifying gaps in security control design.
Search
BENEFITS
Ransomware evolves constantly. So should you.
Ransomware groups are turning up the pressure on their victims – demanding higher ransoms and making sure organizations pay. According to the 2022 Unit 42 Ransomware Threat Report, our incident response casework shows ransom demands averaged US$2.2 million. Unit 42® can help you avoid the price of being unprepared based on lessons we’ve learned negotiating ransoms on the frontlines.
WATCH THE WEBINAR
Minimize the Threat and Impact of Ransomware
Watch the on-demand webinar to get the latest insights into ransomware trends and tactics from Unit 42 experts and learn how to stay protected.
SERVICE FEATURES
Achieve a target state of ransomware readiness
The Unit 42 Ransomware Readiness Assessment is available in three different tiers – each one designed to match the unique needs of your specific organization.
Basic Assessment
Tier 1
Get answers to your ransomware questions from our Unit 42 Threat Researchers and assess your ability to respond.
- Ransomware Tabletop Exercise
- Readiness findings and recommendations report
- Unit 42 Retainer with 250 credits for Incident Response
Advanced Assessment
Tier 2
Take a more proactive approach to search for early-stage indicators of ransomware presence or threat actor activity.
- Ransomware Compromise Assessment
- In-depth technical report of findings and recommendations
- Includes everything in Tier 1
Most Comprehensive
Tier 3
Pressure test your defenses with a simulated attack and demonstrate your ransomware preparedness to your board and C-suite.
- Purple team ransomware campaign
- Data-driven board advisory briefing
- Includes everything in Tiers 1 & 2
| TIER 1 | TIER 2 | TIER 3 | |
|---|---|---|---|
| Readiness Findings and Recommendations Report |  | |  |
| Ransomware Tabletop Exercise | | | |
| 250 Credits Reserved for Incident Response | | | |
| Ransomware Compromise Assessment with Cortex XDR | – | | |
| Purple Team Ransomware Campaign | – | – | |
| Executive / Board Advisory Briefing | – | – | |
Readiness Findings and Recommendations Report | |
|---|---|
Ransomware Tabletop Exercise | |
250 Credits Reserved for Incident Response | |
Ransomware Compromise Assessment with Cortex XDR | – |
Purple Team Ransomware Campaign | – |
Executive / Board Advisory Briefing | – |
Readiness Findings and Recommendations Report | |
|---|---|
Ransomware Tabletop Exercise | |
250 Credits Reserved for Incident Response | |
Ransomware Compromise Assessment with Cortex XDR | |
Purple Team Ransomware Campaign | – |
Executive / Board Advisory Briefing | – |
Readiness Findings and Recommendations Report | |
|---|---|
Ransomware Tabletop Exercise | |
250 Credits Reserved for Incident Response | |
Ransomware Compromise Assessment with Cortex XDR | |
Purple Team Ransomware Campaign | |
Executive / Board Advisory Briefing | |
SHOW TABLE
Here’s what we deliver
Unit 42 will evaluate the effectiveness of your operational capabilities and technical security controls in responding to and recovering from a ransomware incident.
READINESS FINDINGS & RECOMMENDATIONS
RANSOMWARE TABLETOP EXERCISE
250 CREDITS RESERVED FOR INCIDENT RESPONSE
RANSOMWARE COMPROMISE ASSESSMENT
PURPLE TEAM RANSOMWARE CAMPAIGN
EXECUTIVE & BOARD ADVISORY BRIEFING
ASSESS
ASSESS
Conduct stakeholder interviews
Unit 42 will interview your key stakeholders to gain additional insight into security control deployment and technical capabilities.
TEST
Facilitate Tabletop Exercise
Unit 42 will design and manage a ransomware Tabletop Exercise to test your IR processes, tools and internal knowledge.
HUNT
Hunt for ransomware IoCs (Tier 2)
Our threat hunters will search for indicators of unauthorized access, data exfiltration, lateral movement, malicious file execution and persistence.
ATTACK
Conduct Purple Teaming (Tier 3)
Unit 42 experts will attempt to bypass your security controls by leveraging tools and techniques common in ransomware attacks.
IMPROVE
Report findings
You will receive a detailed technical report including security risks with prioritized recommendations to guide your efforts.
WHY UNIT 42
