TripleCyber
עברית Under attack? 08-691-4954

Readiness check · 2 minutes

How ready are you,
really?

Eight questions on the controls that come back in almost every incident we have handled and in every insurer questionnaire. At the end you get a score, and three things to do first.

01MFA on all remote access — VPN, email and cloud?

Why it matters: Root cause of the ransomware incident in our case studies: one VPN account without MFA.

02Offline backups, test-restored in the last six months?

Why it matters: A backup that has never been restored is a hypothesis, not a backup.

03Does anyone see alerts at night and at weekends?

Why it matters: Most ransomware starts out of hours — exactly when nobody is watching.

04EDR on every workstation and server?

Why it matters: Classic antivirus does not see LSASS access or staged encryption.

05A written response plan — who decides, who notifies, what happens in hour one?

Why it matters: Without a plan, the first hour goes on arguing.

06Vendors with remote access — restricted and monitored?

Why it matters: At the industrial manufacturer, the attacker came in through a subcontractor.

07Security patches on servers and workstations within 30 days?

Why it matters: A known, open vulnerability is a door everyone knows the location of.

08Phishing training for staff in the last year?

Why it matters: Email is the first vector in almost every incident.

Emergency line · 24/7/365

Want to go through the result
with an expert?

Click “Talk the result through with an expert” and your answers are filled into the form. We will come back with a short review — no commitment.

08-691-4954
What is this about?

Giving these details is not a legal requirement. They are used only to handle your enquiry. Privacy policy

Under attack? Call now

Emergency mode · 24/7/365

You are in a live incident.

Three things, in this order. We stay with you from the first minute — customer or not.

  1. 01
    Disconnect from the network

    Pull the cable or turn Wi-Fi off. Do not shut the machine down.

  2. 02
    Do not power off, do not delete

    Shutting down erases memory, and the evidence with it.

  3. 03
    Call the line

    A senior analyst picks up within 15 minutes.

08-691-4954
What happens next →