Rapid Cyberattack Assessment Workshop (Full - On-site) — Ransomware Readiness Roadmap

The Rapid Cyberattack Assessment Workshop (Full - On-site) is a three-week cybersecurity assessment and two-day on-site workshop focused on preparedness for rapid cyberattacks such as ransomware. IT Partner reviews pre-assessment questionnaire responses and Rapid Cyberattack Assessment tool results, analyzes gaps, identifies Microsoft technology opportunities, and delivers findings, recommendations, and a tailored Rapid Cyberattack Roadmap.

This workshop is designed for organizations that want to evaluate their cybersecurity posture and readiness for rapid cyberattacks, including ransomware. It is especially relevant when security architects, IT administrators, and other stakeholders can participate in assessment activities, workshop discussions, and roadmap planning.

The engagement is delivered over three weeks. Week 1 is kickoff and pre-assessment preparation, Week 2 is questionnaire and RCA tool assessment, and Week 3 includes the two-day on-site workshop for findings review, gap analysis, roadmap finalization, solution briefings, and technical readiness presentations.

The listed price for the Rapid Cyberattack Assessment Workshop (Full - On-site) is $2,250. The service SKU is ITPWW155TRNOT, and any items outside the stated scope, such as implementation of roadmap recommendations, should be confirmed separately with IT Partner.

The workshop includes a prioritized Rapid Cyberattack Roadmap tailored to your environment, comprehensive documentation of findings and actionable recommendations, RCA tool reports highlighting vulnerabilities and gaps, and a workshop summary with next steps. It also includes a kickoff presentation, pre-assessment documentation, and initial findings and gap analysis.

During Week 1, IT Partner conducts a kickoff meeting to align goals, expectations, and governance. IT Partner also provides the pre-assessment questionnaire and guidance for using the Rapid Cyberattack Assessment tool, with the kickoff presentation and pre-assessment documentation as deliverables.

During Week 2, the customer completes the pre-assessment questionnaire and runs the Rapid Cyberattack Assessment tool on a dedicated machine. IT Partner analyzes the tool outputs and questionnaire information, then begins roadmap planning and prepares initial findings and gap analysis.

On Day 1 of the on-site workshop, IT Partner reviews the questionnaire and RCA tool findings, conducts gap analysis, identifies customer priorities, and develops a preliminary roadmap. On Day 2, IT Partner finalizes and delivers the roadmap and provides solution briefings and technical readiness presentations.

The Rapid Cyberattack Roadmap is a prioritized plan tailored to the customer’s environment for improving readiness against rapid cyberattacks. It is based on questionnaire responses, RCA tool results, identified vulnerabilities, gap analysis, and opportunities to use Microsoft technologies where appropriate.

No, implementation of the roadmap recommendations is not included in the standard workshop scope. The service provides assessment, findings, recommendations, and a tailored roadmap; implementation is available as an add-on service and should be scoped separately with IT Partner.

The workshop does not include implementation of roadmap recommendations, extended post-engagement support beyond the defined scope, or custom configurations and advanced integrations outside standard recommendations. These items may require additional services and should be confirmed with IT Partner before the engagement.

Prerequisites include appropriate Microsoft security licensing, such as Microsoft Defender for Endpoint or Microsoft Sentinel where applicable, a dedicated machine to run the RCA tool, and stable internet connectivity for tool installation and data sharing. The customer must also make security architects, IT administrators, and other relevant stakeholders available for the engagement.

The service lists appropriate Microsoft security licensing, such as Microsoft Defender for Endpoint and Microsoft Sentinel, as a prerequisite. Exact licensing needs can depend on your environment and assessment goals, so customers should confirm their current licensing and any gaps with IT Partner before the workshop begins.

IT Partner is responsible for planning and running the kickoff, providing the pre-assessment questionnaire and RCA tool guidance, reviewing completed questionnaires and tool results, and facilitating the on-site workshops. IT Partner also develops and delivers the tailored roadmap, provides post-engagement documentation, and offers guidance on next steps or additional services if required.

The client is responsible for accurately completing the pre-assessment questionnaire on time, ensuring RCA tool outputs are ready before the workshops, and providing a dedicated machine for the RCA tool. The client must also make IT administrators, security architects, and relevant personnel available, attend scheduled meetings and workshops, participate in roadmap discussions, and approve necessary actions.

The service description does not specify planned downtime or production changes because the scope is assessment, analysis, and roadmap development rather than implementation. However, the RCA tool requires a dedicated machine, internet connectivity, and data sharing, so any operational considerations should be confirmed with IT Partner during kickoff.

IT Partner reviews the customer’s completed pre-assessment questionnaire and Rapid Cyberattack Assessment tool results. These inputs are used to identify vulnerabilities, document critical gaps, analyze priorities, and develop a tailored roadmap for improving cyberattack readiness.

After completion, the customer receives post-engagement documentation that includes workshop findings, roadmap recommendations, and suggested next steps. Extended post-engagement support and implementation of the recommendations are not included in the base scope, but IT Partner can provide guidance on additional services if required.

Yes, the workshop includes analysis of opportunities to leverage Microsoft technologies where appropriate. The goal is not only to identify gaps, but also to help the customer understand relevant Microsoft technologies and implementation considerations through roadmap delivery, solution briefings, and technical readiness presentations.

Security architects, IT administrators, and other relevant stakeholders should attend because the workshop depends on technical context, operational knowledge, and decision-making input. Client participation is required for reviewing findings, prioritizing gaps, discussing the roadmap, and approving necessary actions.