RR-P1Govern ransomware resilience
Ransomware Resilience
Gantt
Review schedule timing and dependencies
Actions
StatusIn progress
RR-P1-M01Set program ownership and decisions
StatusCompleteForecast finish—RR-P1-M02Define critical services and data2 tasks, 3 subtasks
StatusCompleteRR-P1-M02-T1Confirm Tier 1 service owners
StatusCompleteRR-P1-M02-T2Approve the critical-service dependency map
StatusCompleteRR-P1-M03Approve recovery priorities and objectives
StatusCompleteRR-P1-M15Operationalize the ransomware response playbook
StatusPlannedRR-P1-M16Confirm the executive crisis decision process
StatusPlannedRR-P2Prepare recovery access and restoration
RR-P2-M05Separate daily and privileged administration
StatusCompleteRR-P2-M06Require strong authentication
StatusCompleteRR-P2-M07Define recovery access procedures
StatusCompleteRR-P2-M12Establish isolated backup copies1 task, 2 subtasks
StatusCompleteRR-P2-M12-T1Validate isolated backup policy coverage
StatusCompleteRR-P2-M17Test restoration of critical services1 task, 3 subtasks
StatusBlockedRR-P2-M17-T1Restore Tier 1 identity services in isolation
StatusPlannedRR-P2-M01Validate clean-room identity recovery access
StatusIn progressRR-P3Design resilient service boundaries
RR-P3-M04Design resilient service architecture
StatusCompleteRR-P3-M11Segment critical networks and services
StatusCompleteRR-P4Reduce, detect, and exercise ransomware risk
RR-P4-M08Set endpoint detection and isolation coverage
StatusCompleteRR-P4-M09Prioritize vulnerability remediation
StatusCompleteRR-P4-M10Restrict and monitor privileged access
StatusCompleteRR-P4-M13Define detection and escalation procedures
StatusIn progressRR-P4-M14Test alert triage and isolation
StatusIn progressRR-P4-M18Run and review a ransomware exercise1 task, 3 subtasks
StatusBlockedRR-P4-M18-T1Run the executive ransomware exercise
StatusPlannedGovern ransomware resilience
- Forecast finish
- March 5, 2027
Complete
RR-P1-M02 · Define critical services and data
- Forecast finish
- August 21, 2026
- Generated baseline
- August 21, 2026
RR-P1-M02-T1 · Confirm Tier 1 service owners
- Forecast finish
- August 21, 2026
RR-P1-M02-T2 · Approve the critical-service dependency map
- Forecast finish
- August 21, 2026
RR-P1-M03 · Approve recovery priorities and objectives
- Forecast finish
- August 28, 2026
- Generated baseline
- August 28, 2026
RR-P1-M15 · Operationalize the ransomware response playbook
- Forecast finish
- February 26, 2027
- Generated baseline
- September 11, 2026
RR-P1-M16 · Confirm the executive crisis decision process
- Forecast finish
- March 5, 2027
- Generated baseline
- September 18, 2026
Prepare recovery access and restoration
- Forecast finish
- February 26, 2027
RR-P2-M05 · Separate daily and privileged administration
- Forecast finish
- October 9, 2026
- Generated baseline
- October 9, 2026
RR-P2-M06 · Require strong authentication
- Forecast finish
- October 16, 2026
- Generated baseline
- October 16, 2026
RR-P2-M07 · Define recovery access procedures
- Forecast finish
- October 23, 2026
- Generated baseline
- October 23, 2026
RR-P2-M12 · Establish isolated backup copies
- Forecast finish
- December 11, 2026
- Generated baseline
- December 11, 2026
RR-P2-M12-T1 · Validate isolated backup policy coverage
- Forecast finish
- December 11, 2026
RR-P2-M17 · Test restoration of critical services
- Forecast finish
- February 26, 2027
- Generated baseline
- January 29, 2027
RR-P2-M17-T1 · Restore Tier 1 identity services in isolation
- Forecast finish
- February 26, 2027
RR-P2-M01 · Validate clean-room identity recovery access
- Forecast finish
- December 18, 2026
- Generated baseline
- January 15, 2027
Design resilient service boundaries
- Forecast finish
- November 27, 2026
RR-P3-M04 · Design resilient service architecture
- Forecast finish
- October 2, 2026
- Generated baseline
- October 2, 2026
RR-P3-M11 · Segment critical networks and services
- Forecast finish
- November 27, 2026
- Generated baseline
- November 27, 2026
Reduce, detect, and exercise ransomware risk
- Forecast finish
- March 26, 2027
RR-P4-M08 · Set endpoint detection and isolation coverage
- Forecast finish
- October 30, 2026
- Generated baseline
- October 30, 2026
RR-P4-M09 · Prioritize vulnerability remediation
- Forecast finish
- November 6, 2026
- Generated baseline
- November 6, 2026
RR-P4-M10 · Restrict and monitor privileged access
- Forecast finish
- November 13, 2026
- Generated baseline
- November 13, 2026
RR-P4-M13 · Define detection and escalation procedures
- Forecast finish
- March 19, 2027
- Generated baseline
- December 25, 2026
RR-P4-M14 · Test alert triage and isolation
- Forecast finish
- March 26, 2027
- Generated baseline
- January 1, 2027
RR-P4-M18 · Run and review a ransomware exercise
- Forecast finish
- March 19, 2027
- Generated baseline
- February 12, 2027
RR-P4-M18-T1 · Run the executive ransomware exercise
- Forecast finish
- March 19, 2027
Recommendations
| Actions | |||||
|---|---|---|---|---|---|
| London | RR-P02 Prepare recovery access and restorationProject | RR-17 finishes on Feb 26, 2027, 21 days after its Feb 05, 2027 target. | Resolve the technical dependency, then retest affected work. | Feb 05, 2027 | |
| London | RR-P04 Reduce, detect, and exercise ransomware riskProject | RR-18 cannot meet its Feb 05, 2027 target while RR-14 finishes on Mar 26, 2027. | Confirm the external owner, commitment, and date. | Feb 05, 2027 | |
| London | RR-P02 Prepare recovery access and restorationProject | 21 person-days short of the capacity needed by 2027-02-05. Forecast finish 2027-03-26 is 49 days after the target. | Resolve “Test restoration of critical services” with Recovery lead. Close the 21 person-day shortfall: confirm capacity, reduce remaining scope, or agree a revised target. | Feb 12, 2027 |
- Site
- London
RR-P02 Prepare recovery access and restorationProjectImpact
RR-17 finishes on Feb 26, 2027, 21 days after its Feb 05, 2027 target.Recommendations
Resolve the technical dependency, then retest affected work.
- Site
- London
RR-P04 Reduce, detect, and exercise ransomware riskProjectImpact
RR-18 cannot meet its Feb 05, 2027 target while RR-14 finishes on Mar 26, 2027.Recommendations
Confirm the external owner, commitment, and date.
- Site
- London
RR-P02 Prepare recovery access and restorationProjectImpact
21 person-days short of the capacity needed by 2027-02-05. Forecast finish 2027-03-26 is 49 days after the target.Recommendations
Resolve “Test restoration of critical services” with Recovery lead. Close the 21 person-day shortfall: confirm capacity, reduce remaining scope, or agree a revised target.



