Module 5
When it goes wrong: ransomware and the first hours of an incident
Sooner or later something goes wrong: a message is clicked, a device is lost, files are locked. What separates a managed incident from a disaster is not whether it happens but whether people know what to do in the first hours. This module sets out a simple response in stages, explains ransomware and the legal questions around ransom demands, covers the preservation of evidence and the duty to tell the right people on time, and teaches you how to speak to clients when you have bad news. A plan that is written down and rehearsed beats a plan invented under pressure.
Module 1 of this course is free, and this is not it. Unlock the whole course below, or go back to the course page.
Two Ways In
Introductory PriceLaw and Cybersecurity: buy it on its own, or get it with All-Access
Unlock all of Law and Cybersecurity on its own with a one-time purchase, or get it as part of an All-Access Membership, which also covers every course and the other paid tools. A member never needs to buy it separately.
This is an early, introductory price for a brand-new product — it’s expected to rise as we add more content. Buy now and it’s yours at today’s rate, forever.
No account needed: you pay, and we email you a one-click sign-in.
All-Access is $19.99 a month or $149 a year, and covers every course and most tools, this one included. Create a free account to subscribe.
Look first, then buy. Free previews on every product page. Secure payment by Stripe. Pay once, keep it forever. Details
See what is included in All-Access →General education on cybersecurity for lawyers, using invented people and situations. It is not legal advice or technical security advice. Laws, professional rules and standards differ between countries and change over time: check the current rules that apply to you and your clients, and take specialist help in a live incident.
Teaching? Share this with your class
Free to use in class. The free parts open for everyone, no account needed.