Episode notes
James and Emma close the series by designing an architecture that can resist, contain, and recover from human-operated ransomware. Topics include the ransomware economy, attack stages, identity and endpoint controls, segmentation, privileged access, backup isolation, recovery planning, incident response, and rehearsed restoration. Guest incident commander Daniel Frost explains why tested recovery capability creates negotiating power. Includes the final rapid-review round for the series.