RCCE Course
Course #531

Ransomware readiness Playbook for Teams: Primer

📊 Level: Beginner
⏱️ Duration: 2 Days
🏷️ Track: Resilience
📋 Prerequisites: None
🖥️ Mode: Online Instructor-Led
📝 Course Description

RCCE students will learn organizational ransomware preparedness including prevention controls, detection capabilities, response planning, backup resilience, and recovery procedures. RCCE students will learn to assess organizational ransomware readiness through maturity assessments, implement multi-layered ransomware prevention controls including email security, endpoint protection, and network segmentation, configure detection rules for ransomware behavioral patterns, develop ransomware-specific incident response playbooks, design and test immutable backup architectures, conduct ransomware tabletop exercises, validate recovery capabilities through realistic tests, and build organizational awareness programs that reduce ransomware infection risk. This team-oriented course builds collaborative workflows and organizational playbooks for security operations. Starting from foundational concepts, RCCE students will learn to create and implement standardized procedures that enable consistent performance across team members and shifts. Students develop the documentation, communication, and coordination skills needed for effective team-based security operations.

🎯 Target Audience
  • Security Engineers building defensive controls
  • Security Analysts and Blue Team members
  • Systems Administrators with security responsibilities
  • GRC and Risk Professionals supporting controls
  • Professionals implementing Ransomware readiness Playbook for Teams: Primer
🧠 What You Will Learn
  • Execute hands-on tasks for ransomware readiness
  • Execute hands-on tasks for playbook for teams
  • Explain Course Overview fundamentals
  • Execute hands-on tasks for what you will learn
  • Execute hands-on tasks for domain & level
  • Execute hands-on tasks for domain: resilience
  • Execute hands-on tasks for level: beginner
  • Execute hands-on tasks for prerequisites: none — covering Team Skills Developed.
  • Execute hands-on tasks for learning objectives
  • Execute hands-on tasks for develop ransomware ir playbooks — covering Build awareness programs.
  • Execute hands-on tasks for what is ransomware
  • Execute hands-on tasks for business impact — covering Malware encrypting victim data for payment, Average downtime: 21+ days.
📚 Course Outline
Module 01Ransomware Readiness
Module 02Playbook for Teams
Module 03Course Overview
Module 04What You Will Learn
Module 05Domain & Level
Module 06Domain: Resilience
Module 07Level: Beginner
Module 08Prerequisites: None
Module 09Learning Objectives
Module 10Develop ransomware IR playbooks
Module 11What Is Ransomware
Module 12Business Impact
Module 13Spray & Pray
Module 14RaaS Operators
🧪 Lab Details

All hands-on labs run on Rocheston Rose X OS. Students practice ransomware readiness playbook for teams: primer by implementing the controls discussed in class, with a focus on real-world deployment, monitoring, and validation.

  • Lab 1: Execute hands-on tasks for ransomware readiness
  • Lab 2: Execute hands-on tasks for playbook for teams
  • Lab 3: Explain Course Overview fundamentals
  • Lab 4: Execute hands-on tasks for what you will learn
  • Lab 5: Execute hands-on tasks for domain & level
📊 Skill Level
Beginner
Beginner Intermediate Advanced Expert
Duration
2 Days
🎓
Certificate
Completion
🖥️
Lab Platform
Rose X OS
👨‍🏫
Mode of Training
Online Instructor-Led
🔥
Platform
Zelfire
🐦‍⬛
Cyber Range
Raven
📓
Study Material
CyberNotes
🏆 Certificate

Upon successful completion of this course, students will receive an official RCCE Course Completion Certificate for Ransomware readiness Playbook for Teams: Primer, verifiable through the Rocheston certification portal.

🔑 Student Access & Materials
  • Full access to all course materials and slide decks
  • Hands-on lab access on Rocheston Rose X OS environment
  • Access to Rocheston CyberNotes
  • Access to Rocheston Zelfire — EDR/XDR SIEM platform
  • Access to Rocheston Raven — online cyber range exercise platform
  • Access to Rocheston Vulnerability Vines AI