Backups and ransomware readiness

1. Identify every place work data lives: cloud storage, local drives, mailboxes, and line-of-business systems.
2. Confirm at least one copy is kept outside the daily-use account and cannot be deleted by that account.
3. Ask for a restore test — a backup that has never been restored is an assumption, not a plan.
4. Write down who to call first if files start renaming themselves, and disconnect the device from the network.

If you suspect an active infection, open an urgent ticket and call — do not wait for email.

Updated 2026-08-31