Ransomware Containment and Business Continuity, Taught Through a Restaurant Freezer Failure

Bytaisonik

What happens when ransomware hits, and how to contain it, keep the business running and recover, explained through a restaurant whose walk in freezer died overnight. Learn MTPD, RTO and RPO, degraded mode, immutable and offline backups, testing and audit evidence, with no background needed.

Chapters

  • 0:00 Friday, 8 AM: Warm Air in the Freezer
  • 0:39 The Same Morning in an Office
  • 1:21 Who's Talking and What You'll Learn
  • 2:22 Don't Memorize It, Picture the Restaurant
  • 2:55 Part 1: How Attacks Unfold
  • 3:42 How Attackers Get In
  • 4:22 Quiet Spreading: Lateral Movement
  • 5:06 Backups First, Then the 2 AM Attack
  • 5:40 Does Ransomware Strike at Once?
  • 6:00 Double Extortion: Stolen and Locked
  • 6:54 The Freezer Alarm: Detection
  • 7:44 Part 2: Plans and Numbers
  • 8:29 The BIA: What Matters Most
  • 9:14 ISO 22301 and Free Public Guides
  • 9:53 Trap: Backup Is Not a Plan
  • 10:28 MTPD: The Food Safety Clock
  • 11:04 RTO: Your Target to Be Back
  • 11:42 RPO: The Last Stock Count
  • 12:20 Trap: RTO Looks Forward, RPO Looks Back
  • 12:59 RTO or RPO?
  • 13:22 Why Paper Numbers Fall Apart
  • 14:01 Numbers You Can Defend
  • 14:37 Part 3: Contain and Keep Going
  • 15:17 Mistake Two: Panic Power Off
  • 16:04 Mistake Three: Talking Where They Listen
  • 16:42 Good Containment: Coolers and Closed Doors
  • 17:34 Call for Help, Choose One Voice
  • 18:21 Should We Just Pay?
  • 19:05 The Infected Laptop
  • 19:25 Degraded Mode: The Cold Menu
  • 20:04 Paper Processes in a Real Company
  • 20:48 Decide Workarounds Before You Need Them
  • 21:31 Part 4: Backup and Recovery
  • 22:12 The Three Two One Rule
  • 22:54 Immutable, WORM and Air Gap
  • 23:31 Separate Keys for the Backups
  • 24:07 Maersk, 2017: One Offline Copy
  • 24:44 Is a Synced Folder a Backup?
  • 25:08 Restore Speed Matters Too
  • 25:41 Recovery: Rebuild in a Clean Order
  • 26:25 Check, Reset and Keep Watching
  • 27:06 Part 5: Test and Improve
  • 27:41 Tabletop Exercises and Restore Tests
  • 28:15 Lessons Learned and Audit Evidence
  • 28:55 Recap, Back in the Kitchen
  • 29:37 Your Checklist for Monday
  • 30:14 A Bad Day, Not the End

More courses and explainers on the Taistek YouTube channel. New videos every week.

Free download: get my SOC 2 checklist, study guides and ISO 27001 templates at taistek.com/free-resources.

Support the channel

All my courses are free. If this one helped you pass an exam, land a job or get through an audit, a small tip helps me keep making them.

Support on Ko-fi ☕

Similar Posts