


✅ What to do immediately after discovering ransomware
✅ Which systems should and should not be shut down
✅ How to protect backups and patient data
✅ Who needs to be contacted and when
✅ How to restore operations without increasing risk
🚫 Practices that do not maintain reliable backups
🚫 Teams that prefer to improvise during incidents
🚫 Offices without defined roles during emergencies
If ransomware preparedness matters to your practice, this plan provides a clear framework to follow under pressure.