We discussed:

- Changing regulatory environment

- Growing demand due to regulation

- Understanding the maturity of the organisation, developing objectives

- The DFIR factor

- Utilising real life examples from like compromises

- Changing techniques

- Consideration of mitigating controls Some of the questions we ask during these exercises:

- Ransom payment decisioning

- Introducing complexities around sanctions, insurance

- Dependence upon ransom to recover

- Board Engagement on the day

- Accountability / responsibility of the board.