Skip to main content
Marsh logo

Article

Ransomware: How to Create a Comprehensive Incident Response Plan

It is crucial to create a comprehensive incident response plan as the first step to prepare for any ransomware incidents that may take place.
Medium shot of two women working in a data center with rows of server racks and checking the equipment and discussing their work
Person's name and title

By Kelly Butler , 

Cyber Practice Leader, Marsh Specialty

24/08/2022 · 2-minute read

Ransomware attacks are escalating, with more frequent and sophisticated attacks being seen globally in the past year. In the face of a devastating ransomware attack, many companies experience a “paralysis” that significantly lessens the effectiveness of their response. They are often caught off guard — and these hesitations and slow decisions can have significant financial and operational impacts. It is crucial to create a comprehensive incident response plan as the first step to prepare for any ransomware incidents that may take place.

Over the years, Marsh has helped countless organisations craft ransomware incident response plans and tailor cyber coverage to help them prepare for the unexpected. In this guide, we share our insights to help your organisation avoid response paralysis and recover quickly from an attack.

Pre-Incident

The value of preparing in advance for the possibility of a ransomware attack cannot be overstated. Here, we explore numerous considerations, from identifying your options to developing internal policies and guidance to understanding regulatory implications and potential sanctions.

During the Incident

This is where your planning will pay off. We provide insight into key areas during the incident, such as minimising your exposure and working with your carrier, along with the all-important question of whether to —and how to—pay the ransom.

Post-Incident

The work doesn’t end after a ransomware attack is resolved. We provide specific guidance around recovery, including identifying additional weaknesses to strengthening your plan for the future.

Contact Us

For more information about Cyber Risk and how Marsh can support your business, please contact your Marsh representative.

Remove Response Paralysis with a Comprehensive Incident Response Plan

Download now

Related insights

Aerial view of crowd connected by lines

Article

Solving the cyber risk financial dilemma

18/04/2024
Estuary at Bair Island Marine Park in Redwood City, CA

Article

Uncovering first- and third-party cyber risks

25/10/2023
Placeholder Image

Webcast

Generative AI risks and insurance considerations

26/07/2023
Aerial image in summertime Finland showing a road with automobiles between a green forest and a turquoise lake.

Article

Generative AI: Understanding the risks and opportunities

26/07/2023
View more

 LCPA: 21/134