«We have a recovery plan. So we are protected from a ransomware attack.»

It should be a matter of principle that all companies have their own emergency plan – keyword business continuity management. Nevertheless, it is necessary to check this regularly – and as realistically as possible.

This can ensure that the relevant parties understand their role and encounter unforeseen problems.
The whole exercise should not be a purely technical one. For example, the negative impact of an attack can be minimised and recovery accelerated if the PR department or an outside vendor is involved in the simulation.
Involving insurance partners or external service providers early on can also be a useful measure, as they can offer insights from other incidents.