Ransomware Readiness:
Building Incident Response Playbooks

Ransomware Readiness: Building Incident Response Playbooks

Overview


In an era where ransomware attacks are rapidly increasing in scale and sophistication, organizations must be prepared with proactive and well-tested Incident Response Playbooks. This 2-day hands-on workshop empowers professionals with the knowledge, frameworks, and tools to build, implement, and test ransomware-specific incident response plans.

Participants will engage in real-world scenarios, tabletop exercises, and guided playbook creation sessions that will enhance their ability to respond quickly and effectively when a ransomware attack strikes.

Format

On-campus

Tuition

Rs. 80,000+Tax

Duration

2 Days

Registration

Open

Key Topics


Day 1 – Foundations of Ransomware & Response Planning

The first day of the workshop lays the groundwork by exploring the evolving cyber threat landscape, with a specific focus on ransomware. Participants will gain a deep understanding of ransomware types, common attack vectors, and emerging global trends. The session continues with an in-depth walkthrough of the Incident Response Lifecycle, guiding attendees from threat detection to system recovery.

Later in the day, participants will learn how to craft a ransomware-specific response strategy tailored to their organizational needs. The day concludes with a high-impact tabletop simulation exercise, giving participants a chance to apply their learnings in a realistic scenario of a ransomware breach.

Day 2 – Designing & Testing Playbooks

Day two shifts the focus toward designing actionable and organization-specific ransomware playbooks. Participants will explore the essential components of a strong playbook, including defining roles, setting escalation protocols, and identifying response triggers.

This is followed by a session on the legal and regulatory considerations, along with communication strategies essential during and after a ransomware attack. The hands-on segment enables participants to draft their own playbooks, supported by expert guidance and peer discussions.

The program concludes with a second simulation and peer review session, where participants test their drafted playbooks using scenario-based tools and red-team strategies. Key lessons learned and feedback are shared, ensuring each participant leaves with a validated, practical, and adaptable ransomware response plan.

Learning Outcomes


By the end of this program, participants will:

  • Understand ransomware threats and organizational risks
  • Know how to build an effective ransomware response playbook
  • Be able to test and iterate on their playbooks through exercises
  • Strengthen collaboration across technical and business units
  • Ensure compliance with local/international data protection norms

Who Should Attend:


This program is designed for mid to senior-level professionals responsible for cybersecurity, IT governance, and crisis response:

  • CISOs / CIOs / CTOs
  • IT Managers & Security Engineers
  • Incident Response & SOC Teams
  • Risk & Compliance Officers
  • Data Protection Officers
  • Disaster Recovery & Business Continuity Teams
  • Cybersecurity Consultants and Auditors

Learning Outcome


Through hands-on experience, you'll gain in-depth knowledge of ERP Systems Applications and Products (Oracle & SAP) including:

  • Oracle Financials & Supply Chain Modules
  • SAP Financials & Supply Chain Modules
  • Oracle Business Intelligence
  • Power BI Interactive Data Visualization Tool

Eligibility Criteria


Candidates who've already completed Bachelor's degree with practical / professional skills (Females are encouraged to apply)

Program Fees


Program Fees: PKR/- 105,000 (Including 5% SST)

10% discount is offered if full fee is paid in advance

Advance Payment Schedule Total
Total fee in Advance (Lumpsum) PKR/- 94,500
Installments Payment Schedule Total
Total Fee (if paid in 3 equal installments) PKR 35,000 PKR 35,000 PKR 35,000 PKR/- 105,000 (Including 5% SST)

Fee Includes:

Processing fees, Test and Exam Fees, Diploma and Transcript. Fees do not include course material, books and stationery.

Admission fees PKR 1000/-

Payment

Payment is due upon receipt of the acceptance of participants to the program along with the invoice.

Please ensure that the payment reaches the CICT Office before commencement of the program because seat in the class will only be reserved once the fee is received.

Payment can be made via cheque / bank draft payable to the "Institute of Business Administration, Karachi" at the following address:

Center for Information & Communication Technology (CICT)
IBA, City Campus, Garden/Kayani Shaheed Road, Karachi.

For online payments via credit cards: https://onlinepayment.iba.edu.pk/

Duration


  • 4 months including 6 courses (per course/24 Training Hours)
  • Saturday & Sunday

Trainer's Profile


Faisal Jalal

Faisal Jalal, the Founder and Chairman of Sinofeng Pakistan Private Limited and leader of FJ Holdings brings over 25 years of diverse experience in senior management positions within multinationals, JVs, and large Pakistani organizations to his role as a trainer for the ERP SAP Certification Program at IBA CICT. His extensive credentials include CQSSBB, PE, and SAP Certified Trainer, along with a Certified Supply Chain Specialist qualification approved by the International Trade Centre UNCTAD/WTO. Faisal’s expertise is further evidenced by his significant contributions to supply chain management, ERP implementations, and IT systems and his active participation in industry conferences and publications.

Muhammad Rizwan

Muhammad Rizwan is a seasoned leader with over 25 years of corporate experience in digital transformation and technology-driven innovation. He has held executive roles in both public and private equity sectors, specializing in ERP platforms and software solutions. Rizwan’s expertise extends to training, with a background as an official Oracle ERP instructor. He holds academic credentials including a certificate in Machine Learning from Stanford University, alongside master’s and bachelor’s degrees in relevant fields. Currently, as the Head of Information Technology at Bachaa Party, he spearheads strategic initiatives to enhance organizational efficiency and innovation. His track record includes impactful contributions to renowned organizations such as Hino Pak Motors and the Karachi Stock Exchange. Mr. Rizwan possesses extensive expertise in training industry professionals across various domains including Data, ERP systems (such as SAP and Oracle), Databases, Big Data, Excel, and Power BI.

Trainer

Ms. Sana Zahra Ahmed, Vice President at Titanium MSSP RapidCompute, is a distinguished trainer in Cyber Security and Security Operations Centers (SOC). With extensive experience developing and implementing security strategies for over 100 companies, she has driven a 300% growth in clientele and significantly improved breach response times through her leadership in 24/7 SOC operations. Her expertise includes NG SIEM, FIM, UEBA, NDR, SOAR, and predictive threat intelligence. Recognized for her industry \liance expertise with over 10 international security standards.

  • Four Months
  • Friday 6:00 pm to 9:00 pm
  • Saturday 10:00 am to 1:00 pm and 2:00 pm to 5:00 pm