LIVE WEBINAR EVENT

You Paid the Ransom

Inside the war room of a real-life ransomware response.

Wednesday July 16 2025

12:00 PM BST

40-minute simulation

Seats limited

Most IR plans look good on paper. Until they’re tested under pressure. This simulation exposes where your playbook fails before a real attacker does.

screenshot showing ransom payment made

Fast decisions. High pressure. No playbook.

Imagine this:

Your company’s been hit by ransomware.
You made the payment.
But nothing’s going according to plan.

What do you do next?

Join us for an unfiltered, live incident response simulation that puts you in the war room of a business that just paid the ransom. You’ll make the calls. You’ll feel the pressure. And you’ll see where most IR plans fall apart.

👉 This is not a talk. It’s a test. YOU get to decide the path.

You’ll walk away with real insights into how to lead through chaos, as well as how to build a breach-ready response that actually holds under fire.

You Paid the Ransom: Inside the War Room (Live IR Teardown)

In this webinar, you’ll discover:

We’re not here to theorise. This is a battle-tested, high-impact learning experience with immediate takeaways:

  • Experience the first 48 hours after payment
    Get a seat at the decision table during the most critical hours of a ransomware breach.
  • Learn to think, not just follow a playbook
    Understand the psychology and failure points that cause most IR plans to crumble.
  • Spot where most teams break. Before yours does
    Identify weak points in your own org’s response plan through real-world branching scenarios.
  • Leave with tools you’ll actually use
    Sharpen your leadership, planning and crisis communication capabilities.

This webinar is built from real attack patterns and breach outcomes in the UK.

😱 But wait, there’s more!

By attending the live session, you’ll also get:

  • The “Post-Payment IR Checklist” (exclusive template)
  • Live breakdowns of each scenario and what should’ve been done differently
  • A private voting link to shape the scenario before the session starts
  • Bonus expert Q&A during the debrief

Who should attend?

  • Security leaders (CISOs, CIOs, IR leads)
  • Risk and governance professionals
  • Business continuity and IT operations heads
  • Anyone who owns or influences cyber resilience planning

Why this matters — right now

Ransomware is no longer a matter of if.
The cost of being unprepared? Your data, your uptime, your reputation.

🚨 Loss aversion drives decisions. This simulation will show you exactly what you’re at risk of losing if your IR strategy isn’t built for real-world conditions.

Sign-up now. Secure your spot.

About the author

Matt, co-founder and CEO of CloudGuard, is an IT industry veteran with 35 years of senior experience. He has held pivotal roles at major organisations including Microsoft, Severn Trent Plc, Perot Systems, Computacenter, Digica, Pulsant, BCN, SmarterMed and SoftwareONE. He has been a Microsoft Certified Technical Architect since 2003 and was honoured as a CIO100 member in 2015, 2018, 2020, and 2021.

Since 2008, Matt has led advancements in AI and automation. Under his guidance, his team pioneered the use of machine learning to analyse extensive datasets across industries such as cybersecurity and utilities. His deep understanding of these technologies has driven innovation and positioned him as a thought leader on their ethical implications. He has shared his expertise at global conferences, discussing the transformative potential and ethical considerations of AI and automation.

Beyond his IT career, Matt has been a significant investor in renewable energy since 2010, reflecting his commitment to sustainable development.

Matt Lovell, CloudGuard CEO and Co-Founder

Matt Lovell

Co-founder and CEO
CloudGuard

Still have questions about incident response planning?

It’s a downloadable Excel tool that helps you assess your incident response maturity across 16 essential controls. You score each area, add notes and get a weighted breakdown of your strengths and gaps.

It’s designed for IT, security, risk or resilience leads in financial services – but it’s useful for anyone responsible for building, owning or reviewing an IR plan.

Most people can work through the full scorecard in under 15 minutes. You can go deeper if you want to assign actions or use it in a tabletop session.

No. It’s self-contained and ready to go. You don’t need data feeds or special tools. All you need is a working knowledge of how your Incident Response Plan operates in practice.

Yes. No sales pitch, no signup wall, no strings. It’s a resource to help you improve incident response planning and identify areas where your team might need support.

Still deciding? Get the scorecard and see how your incident response planning measures up.

 

📥 Download the Cyber Incident Response Planning Scorecard