The document provides resources and an emergency action plan for responding to ransomware attacks. It lists useful security update blogs, alerts, and guidance from organizations like Jisc and NCSC. It also lists security services and a security conference from Jisc. For ransomware attacks, it recommends isolating your network, notifying the local police, Action Fraud, NCSC, and Jisc CSIRT as first steps in the emergency action plan.

1. Tech 2 Tech - Security
Useful resources and an Emergency Action Plan for Ransomware Attacks

2. Useful Resources
2
• Jisc Update Blog: https://share.cisp.org.uk/groups/academia
• NCSC Alert: https://www.ncsc.gov.uk/news/alert-targeted-ransomware-attacks-on-uk-education-
sector
• NCSC Guidance: https://www.ncsc.gov.uk/guidance/mitigating-malware-and-ransomware-attacks
• Jisc Splunk Managed License Service: https://www.jisc.ac.uk/splunk
• Jisc Managed SIEM Service: https://www.jisc.ac.uk/managed-siem
• Jisc Security Conference 2020: https://www.jisc.ac.uk/security-conference

3. Ransomware - Emergency Action Plan – first steps
We highly recommend you:
• Isolate your network
• Notify your local police on 101
• Notify Action Fraud: https://www.actionfraud.police.uk/contact-us
• Notify the NCSC: https://report.ncsc.gov.uk/
• Notify Janet CSIRT: https://www.jisc.ac.uk/csirt
3