Healthcare · Ransomware · KVKK · Incident Response
Hospital HIS · ransomware arrived at surgery time
Saturday 06:42 · ER tablets on a lock screen · HIS down · 4 operating rooms suspending elective cases. 2 million patient records encrypted, ransom 2.4M USD. As the incident response lead, you will make 11 critical decisions in sequence.
Before you start the scenario
- You are the decision-maker in this incident · every choice leaves time/cost/reputation behind
- There are no wrong answers · just like in real life · but some paths are more expensive
- You can restart it anytime · try different paths
- At the end, a 3-axis score + alternative routes are shown