Ransomware Readiness: A Practical Checklist for Indian Businesses
Ransomware gangs no longer target only large enterprises. Manufacturers, hospitals, schools, logistics firms and professional-services companies across India are hit every month — often through a single stolen password or an unpatched server.
Reduce the chance of getting in
- Multi-factor authentication on email, VPN, remote desktop and every admin account.
- Close exposed remote access: no RDP or management interfaces open to the internet.
- Patch internet-facing systems first — firewalls, VPN gateways, mail servers and web apps.
- Endpoint protection with behaviour detection, not just signature antivirus.
- User awareness: short, regular phishing training.
Limit how far an attacker can spread
- Segment the network so one infected laptop cannot reach every server.
- Remove local admin rights from everyday users.
- Separate administrator accounts from daily-use accounts.
Make recovery possible
- Keep at least one backup copy offline or immutable so attackers cannot encrypt or delete it.
- Test restores regularly — measure how long a full restore actually takes.
- Document which systems must come back first.
Have a plan before you need it
Decide in advance who leads the response, who talks to customers and regulators, and which external experts you will call. In India, cyber incidents of specified types must be reported to CERT-In within a short window, so the plan should include that step.
Ubixe Infotech helps organisations assess and close these gaps. See our IT Security service or book a ransomware readiness review.
