16NOV
16 - 20 Nov 2026Mon to Fri · 5 days
Kuala LumpurMalaysia · Classroom
£2,250per delegate2+ people: £1,800 each
Professional training course · IMCS-017
Ransomware Defence and Recovery
Ransomware is one of the most damaging cyber threats facing organisations, capable of halting operations for weeks and exposing sensitive data. Defence requires…
- 5 daysClassroom
- 14Upcoming dates
- 7Cities
- £2,250Fees from
Course overview
Why Attend
Ransomware is one of the most damaging cyber threats facing organisations, capable of halting operations for weeks and exposing sensitive data. Defence requires prevention, detection, resilient backups and rehearsed response.
This LLMI course explains how ransomware attacks unfold, initial access vectors, hardening and prevention, detection of early indicators, backup and recovery architectures, response decision-making including extortion demands, communication and lessons learned. Participants take part in a ransomware response exercise.
The course serves both technical and management audiences.
Course Objectives
Explain the ransomware attack life cycle
Reduce initial access and lateral movement risks
Detect early indicators of ransomware
Design resilient backup and recovery
Plan response and decision-making
Recover operations and learn from incidents
Target Audience
IT and security managers
System administrators
Business continuity professionals
CISOs
Risk managers
Senior managers
Course Methodology
Threat briefings
Hardening workshops
Backup design exercise
Response simulation
Case studies
Course outline
-
1Day 1: Understanding Ransomware
- Ransomware business model
- Attack life cycle
- Double extortion
- Notable incidents
- Threat actors
- Case study: Major ransomware attack
-
2Day 2: Prevention
- Initial access vectors
- Patching and hardening
- Identity protection
- Email and endpoint controls
- Segmentation
- Workshop: Hardening plan
-
3Day 3: Detection
- Indicators of compromise
- Monitoring
- Endpoint detection
- Threat hunting
- Early containment
- Exercise: Detection review
-
4Day 4: Backup and Recovery
- Backup strategies
- Immutable backups
- Recovery testing
- Recovery priorities
- Business continuity
- Workshop: Backup architecture
-
5Day 5: Response
- Response plan
- Decision-making on demands
- Legal and regulatory
- Communication
- Lessons learned
- Capstone: Ransomware simulation
Schedule
Dates and fees
14 upcoming dates in 7 cities. Fees are per delegate; bring colleagues and every seat is discounted.
November 2026
Kuala LumpurMalaysia · Classroom
December 2026
7DEC
7 - 11 Dec 2026Mon to Fri · 5 days
BarcelonaSpain · Classroom
£3,850per delegate2+ people: £3,080 each
January 2027
11JAN
11 - 15 Jan 2027Mon to Fri · 5 days
Cape TownSouth Africa · Classroom
£2,840per delegate2+ people: £2,272 each
February 2027
8FEB
8 - 12 Feb 2027Mon to Fri · 5 days
FrankfurtGermany · Classroom
£3,250per delegate2+ people: £2,600 each
March 2027
8MAR
8 - 12 Mar 2027Mon to Fri · 5 days
BarcelonaSpain · Classroom
£3,850per delegate2+ people: £3,080 each
April 2027
12APR
12 - 16 Apr 2027Mon to Fri · 5 days
LondonUnited Kingdom · Classroom
£4,200per delegate2+ people: £3,360 each
May 2027
10MAY
10 - 14 May 2027Mon to Fri · 5 days
RomeItaly · Classroom
£4,250per delegate2+ people: £3,400 each
June 2027
14JUN
14 - 18 Jun 2027Mon to Fri · 5 days
Kuala LumpurMalaysia · Classroom
£2,250per delegate2+ people: £1,800 each
July 2027
12JUL
12 - 16 Jul 2027Mon to Fri · 5 days
BarcelonaSpain · Classroom
£3,850per delegate2+ people: £3,080 each
August 2027
9AUG
9 - 13 Aug 2027Mon to Fri · 5 days
ParisFrance · Classroom
£4,500per delegate2+ people: £3,600 each
September 2027
13SEP
13 - 17 Sep 2027Mon to Fri · 5 days
FrankfurtGermany · Classroom
£3,250per delegate2+ people: £2,600 each
October 2027
11OCT
11 - 15 Oct 2027Mon to Fri · 5 days
BarcelonaSpain · Classroom
£3,850per delegate2+ people: £3,080 each
November 2027
8NOV
8 - 12 Nov 2027Mon to Fri · 5 days
LondonUnited Kingdom · Classroom
£4,200per delegate2+ people: £3,360 each
December 2027
13DEC
13 - 17 Dec 2027Mon to Fri · 5 days
RomeItaly · Classroom
£4,250per delegate2+ people: £3,400 each
No dates in this city right now. Request a quotation and we will suggest the nearest date.
Questions
Frequently asked questions
How long is the Ransomware Defence and Recovery course?
The course runs over 5 days of classroom training, usually Monday to Friday.
When is the next Ransomware Defence and Recovery course?
The next public date is 16 - 20 Nov 2026 in Kuala Lumpur. There are 14 upcoming dates in total.
Where is this course held?
Upcoming sessions run in Kuala Lumpur, Barcelona, Cape Town, Frankfurt, London, Rome, Paris.
How much does the course cost?
Fees start from £2,250 per delegate, depending on the city. Fees include tuition and course materials.
Do participants receive a certificate?
Yes. Delegates who complete the course receive a London Leadership Management Innovation certificate of completion.
Can this course be delivered in-house for our team?
Yes. LLMI can tailor and deliver this course privately for your organisation at your premises or in one of our training cities.
Course information last updated 14 November 2026.
Related
More IT Management and Cyber Security courses
AI Security: Protecting Machine Learning Systems
Next: 14 - 18 Dec 2026 · Paris
Paris, Barcelona, London +7 more
Application Security and Secure Software Development
Next: 21 - 25 Dec 2026 · Barcelona
Barcelona, Munich, London +5 more
Artificial Intelligence (AI) in Cyber Forensics: Investigating Advanced Cyber Crimes
Next: 16 - 20 Nov 2026 · Istanbul
Istanbul, Rome, Frankfurt +5 more