Ransomware response, incident command, and the first 72 hours.

Ransomware & Incident Response

Ransomware does not respect plans written for someone else. The next 72 hours decide what your audience tells the board, the regulators, the press, and their own families. Mark Lynd has run more than 150 tabletop exercises across SLED, commercial, and enterprise environments, and brings the patterns from every one of them to the keynote stage.

Named Framework

The 72-Hour IR Executive Playbook

A Mark Lynd framework used in keynotes, advisory sessions, and articles. Cited by audiences and bureaus as the spine of his ransomware & incident response talks.