's Ransomware Checkup with Axsos
- Why SMEs and mid-sized companies in particular need targeted security audits
Ransomware Checkup: Do You Know Your Ransomware Risk?
The threat posed byransomwarecontinues to grow every year. It is not only large corporations that are targeted by attacks, but increasingly also public institutions and small and medium-sized enterprises, which often have inadequate security measures in place. Attackers specifically seek out vulnerabilities and not only encrypt production data but also frequently threaten to publish confidential information.Axsos’ITQ Ransomware Checkup v3addresses this threat landscape: It assesses specific requirements, evaluates theransomware risk, and provides clearrecommendations for action to measurably improve your company’s security.
- A structured audit process specifically designed for small and medium-sized enterprises (SMEs)
What is the ITQ Ransomware Checkup v3?
TheITQ Ransomware Checkup v3is a certifiedaudit procedure developed based on recommendations from the BSI, cyber insurers, state data protection authorities, and IT specialists. Theauditcomprises89 audit questionsdivided into five audit groups and delivers a high-quality, approximately 30-page final report featuring a graphical representation of the level of compliance, a detailed risk assessment, and prioritizedrecommendations for action. The audit methods include documentation review, activity analysis, measurement data analysis, on-site inspections, interviews, and document review.
- Which areas the ITQ Ransomware Checkup v3 checks and evaluates
The Five Test Groups of the Ransomware Checkup
Prevent Infection
The largest audit group covers remote access, administrator accounts, data storage locations, email security on servers and clients, client security, software updates, antivirus protection, and firewall configuration. Of particular concern: inadequate patch management, the lack of multi-factor authentication, and insufficient email protection significantly increase therisk of ransomware.
Backups & Data Protection Strategy
A comprehensiveauditof the data backup strategy and backup processes. The audit examines backup intervals, responsibilities, recovery tests, and the physical separation of backups from the internal network. Attackers often encrypt not only production data but also backups. An external, network-independent data backup is therefore essential.
Training & Awareness
Nearly one in two security incidents is caused by human error. TheRansomware Checkupverifies whether user policies are in place, training sessions are held regularly, and new employees receive training as part of the onboarding process. Topics include: secure email practices, social engineering threats, and safe web browsing.
Monitoring, Curing & Logging
Response Measures
Without effective emergency management, aransomware attackcan threaten a company’s very existence. Theauditverifies whether an emergency notification plan is in place that includes forensic experts, IT support staff, cybersecurity authorities, and cyber insurance providers, and whether an emergency communication platform is available that continues to function even if internal systems fail.
- Tangible Added Value and Report Content for Your Company
What You'll Get from the Ransomware Checkup
TheITQ Ransomware Checkup v3does not provide an abstract assessment, but rather a practical roadmap. Allrecommended actionsare color-coded according toransomware risk: high-risk issues are marked in red, medium-risk issues in orange, and low-risk issues in gray. This way, you know immediately where action is needed.
01
Test Report
High-Quality Final Report
Approximately 30 pages with graphical representations of the compliance rate for each audit group, a detailed risk assessment, and a complete overview of the current status of all audited areas.
02
Measures
Up to 89 recommendations—
All recommended measures are color-coded according to risk level and organized into an initial implementation plan. In addition, a DSV file containing appropriate measures is generated.
03
Risk Assessment
: An Objective Risk Assessment
The risk matrix calculates risk scores based on probability of occurrence and severity of loss. The overall result provides clear guidance for the strategic allocation of the IT budget.
04
Proof
Limitation of Liability & Duty of Care
The Ransomware Checkup documents that a process to improve the level of protection has been initiated. This provides verifiable evidence for insurance companies and government agencies.
- How the Ransomware Checkup Paves the Way for Long-Term Protection
Well-Protected Against Ransomware: The Next Step
Information security is not a one-time project, but an ongoing process. TheITQ Ransomware Checkup v3provides the foundation for launching this process in a structured manner: with a clear picture ofyour currentransomware risk, prioritizedrecommendations for action, and verifiable proof of your due diligence. Upon request,Axsos will support you in implementing all recommended measures, from technical safeguards and employee training to emergency management.