When ransomware hits, there is no time to read. This card is meant as a poster: short, clear, with action sequence, contact-list template and escalation matrix.
We recommend posting it in the server room and IT control desk. In a real incident the team reacts in a structured way instead of in panic.
What is inside
- Immediate actions minutes 0–10
- Containment minutes 10–30
- Escalation minutes 30–60
- Who is informed when (template)
- Evidence preservation — what must not be deleted
- Reporting duties and authority contacts