Ransomware readiness Playbook for Teams: Primer
RCCE students will learn organizational ransomware preparedness including prevention controls, detection capabilities, response planning, backup resilience, and recovery procedures. RCCE students will learn to assess organizational ransomware readiness through maturity assessments, implement multi-layered ransomware prevention controls including email security, endpoint protection, and network segmentation, configure detection rules for ransomware behavioral patterns, develop ransomware-specific incident response playbooks, design and test immutable backup architectures, conduct ransomware tabletop exercises, validate recovery capabilities through realistic tests, and build organizational awareness programs that reduce ransomware infection risk. This team-oriented course builds collaborative workflows and organizational playbooks for security operations. Starting from foundational concepts, RCCE students will learn to create and implement standardized procedures that enable consistent performance across team members and shifts. Students develop the documentation, communication, and coordination skills needed for effective team-based security operations.
- Security Engineers building defensive controls
- Security Analysts and Blue Team members
- Systems Administrators with security responsibilities
- GRC and Risk Professionals supporting controls
- Professionals implementing Ransomware readiness Playbook for Teams: Primer
- Execute hands-on tasks for ransomware readiness
- Execute hands-on tasks for playbook for teams
- Explain Course Overview fundamentals
- Execute hands-on tasks for what you will learn
- Execute hands-on tasks for domain & level
- Execute hands-on tasks for domain: resilience
- Execute hands-on tasks for level: beginner
- Execute hands-on tasks for prerequisites: none — covering Team Skills Developed.
- Execute hands-on tasks for learning objectives
- Execute hands-on tasks for develop ransomware ir playbooks — covering Build awareness programs.
- Execute hands-on tasks for what is ransomware
- Execute hands-on tasks for business impact — covering Malware encrypting victim data for payment, Average downtime: 21+ days.
| Module 01 | Ransomware Readiness |
| Module 02 | Playbook for Teams |
| Module 03 | Course Overview |
| Module 04 | What You Will Learn |
| Module 05 | Domain & Level |
| Module 06 | Domain: Resilience |
| Module 07 | Level: Beginner |
| Module 08 | Prerequisites: None |
| Module 09 | Learning Objectives |
| Module 10 | Develop ransomware IR playbooks |
| Module 11 | What Is Ransomware |
| Module 12 | Business Impact |
| Module 13 | Spray & Pray |
| Module 14 | RaaS Operators |
All hands-on labs run on Rocheston Rose X OS. Students practice ransomware readiness playbook for teams: primer by implementing the controls discussed in class, with a focus on real-world deployment, monitoring, and validation.
- Lab 1: Execute hands-on tasks for ransomware readiness
- Lab 2: Execute hands-on tasks for playbook for teams
- Lab 3: Explain Course Overview fundamentals
- Lab 4: Execute hands-on tasks for what you will learn
- Lab 5: Execute hands-on tasks for domain & level
Upon successful completion of this course, students will receive an official RCCE Course Completion Certificate for Ransomware readiness Playbook for Teams: Primer, verifiable through the Rocheston certification portal.
- Full access to all course materials and slide decks
- Hands-on lab access on Rocheston Rose X OS environment
- Access to Rocheston CyberNotes
- Access to Rocheston Zelfire — EDR/XDR SIEM platform
- Access to Rocheston Raven — online cyber range exercise platform
- Access to Rocheston Vulnerability Vines AI