RR-P1Govern ransomware resilience2 of 4 milestones complete
Ransomware Resilience
List
Review milestones in a sortable hierarchy
HealthLeadPlanned finishActions
- HealthAt riskStatusIn progressLeadSecurity program ownerPlanned finishForecast finish
- HealthOn trackStatusCompleteLeadExecutive sponsorPlanned finishNot scheduledForecast finishNot scheduledRR-P1-M01Set program ownership and decisions
- HealthOn trackStatusCompleteLeadProgram leadPlanned finishForecast finishRR-P1-M02Define critical services and data2 tasks, 3 subtasks
- HealthOn trackStatusCompleteLeadProgram leadPlanned finishForecast finishRR-P1-M02-T1Confirm Tier 1 service owners
- HealthOn trackStatusCompleteLeadProgram leadPlanned finishForecast finishRR-P1-M02-T2Approve the critical-service dependency map
- HealthOn trackStatusCompleteLeadResilience leadPlanned finishForecast finishRR-P1-M03Approve recovery priorities and objectives
- HealthAt riskStatusPlannedLeadIncident response leadPlanned finishForecast finishRR-P1-M15Operationalize the ransomware response playbook
- HealthAt riskStatusPlannedLeadExecutive sponsorPlanned finishForecast finishRR-P1-M16Confirm the executive crisis decision process
- HealthOff trackStatusBlockedLeadRecovery leadPlanned finishForecast finishRR-P2Prepare recovery access and restoration4 of 6 milestones complete
- HealthOn trackStatusCompleteLeadIdentity leadPlanned finishForecast finishRR-P2-M05Separate daily and privileged administration
- HealthOn trackStatusCompleteLeadIdentity leadPlanned finishForecast finishRR-P2-M06Require strong authentication
- HealthOn trackStatusCompleteLeadRecovery leadPlanned finishForecast finishRR-P2-M07Define recovery access procedures
- HealthOn trackStatusCompleteLeadRecovery leadPlanned finishForecast finishRR-P2-M12Establish isolated backup copies1 task, 2 subtasks
- HealthOn trackStatusCompleteLeadRecovery leadPlanned finishForecast finishRR-P2-M12-T1Validate isolated backup policy coverage
- HealthOff trackStatusBlockedLeadRecovery leadPlanned finishForecast finishRR-P2-M17Test restoration of critical services1 task, 3 subtasks
- HealthOn trackStatusPlannedLeadRecovery leadPlanned finishForecast finishRR-P2-M17-T1Restore Tier 1 identity services in isolation
- HealthOff trackStatusIn progressLeadIdentity recovery leadPlanned finishForecast finishRR-P2-M01Validate clean-room identity recovery access
- HealthOn trackStatusCompleteLeadSecurity architecture leadPlanned finishForecast finishRR-P3Design resilient service boundaries2 of 2 milestones complete
- HealthOn trackStatusCompleteLeadArchitecture leadPlanned finishForecast finishRR-P3-M04Design resilient service architecture
- HealthOn trackStatusCompleteLeadNetwork leadPlanned finishForecast finishRR-P3-M11Segment critical networks and services
- HealthOff trackStatusBlockedLeadSecurity operations leadPlanned finishForecast finishRR-P4Reduce, detect, and exercise ransomware risk3 of 6 milestones complete
- HealthOn trackStatusCompleteLeadSecurity operations leadPlanned finishForecast finishRR-P4-M08Set endpoint detection and isolation coverage
- HealthOn trackStatusCompleteLeadVulnerability leadPlanned finishForecast finishRR-P4-M09Prioritize vulnerability remediation
- HealthOn trackStatusCompleteLeadAccess leadPlanned finishForecast finishRR-P4-M10Restrict and monitor privileged access
- HealthAt riskStatusIn progressLeadSecurity operations leadPlanned finishForecast finishRR-P4-M13Define detection and escalation procedures
- HealthAt riskStatusIn progressLeadSecurity operations leadPlanned finishForecast finishRR-P4-M14Test alert triage and isolation
- HealthOff trackStatusBlockedLeadProgram leadPlanned finishForecast finishRR-P4-M18Run and review a ransomware exercise1 task, 3 subtasks
- HealthOn trackStatusPlannedLeadProgram leadPlanned finishForecast finishRR-P4-M18-T1Run the executive ransomware exercise
Recommendations
| Actions | |||||
|---|---|---|---|---|---|
| London | RR-P02 Prepare recovery access and restorationProject | RR-17 finishes on Feb 26, 2027, 21 days after its Feb 05, 2027 target. | Resolve the technical dependency, then retest affected work. | Feb 05, 2027 | |
| London | RR-P04 Reduce, detect, and exercise ransomware riskProject | RR-18 cannot meet its Feb 05, 2027 target while RR-14 finishes on Mar 26, 2027. | Confirm the external owner, commitment, and date. | Feb 05, 2027 | |
| London | RR-P02 Prepare recovery access and restorationProject | 21 person-days short of the capacity needed by 2027-02-05. Forecast finish 2027-03-26 is 49 days after the target. | Resolve “Test restoration of critical services” with Recovery lead. Close the 21 person-day shortfall: confirm capacity, reduce remaining scope, or agree a revised target. | Feb 12, 2027 |
- Site
- London
RR-P02 Prepare recovery access and restorationProjectImpact
RR-17 finishes on Feb 26, 2027, 21 days after its Feb 05, 2027 target.Recommendations
Resolve the technical dependency, then retest affected work.
- Site
- London
RR-P04 Reduce, detect, and exercise ransomware riskProjectImpact
RR-18 cannot meet its Feb 05, 2027 target while RR-14 finishes on Mar 26, 2027.Recommendations
Confirm the external owner, commitment, and date.
- Site
- London
RR-P02 Prepare recovery access and restorationProjectImpact
21 person-days short of the capacity needed by 2027-02-05. Forecast finish 2027-03-26 is 49 days after the target.Recommendations
Resolve “Test restoration of critical services” with Recovery lead. Close the 21 person-day shortfall: confirm capacity, reduce remaining scope, or agree a revised target.