Ransomware Training

Be equipped against ransomware attacks.

Ransomware Training

Ransomware attacks are a constant threat to any business, regardless of its size. The potential costs are enormous and can even threaten a company’s existence. However, the material and non-material consequences of a successful attack are often underestimated.

In order to be optimally prepared and to save time and money in the event of a ransomware attack, Oneconsult offers a four-day hands-on Ransomware Training course for your security team (IT/CERT/CSIRT). You will receive the course materials. at the end of the training.

Learning Objectives / Content

The objective of this training is to prepare IT/CERT/CSIRT personnel for incidents involving ransomware. Participants will gain the knowledge necessary to be able to respond appropriately to an incident.

The training covers the incident response process and the analysis of a ransomware incident, illustrated with real-world examples. Topics such as protective measures and negotiating with ransomware groups are also included. The course is rounded off with interactive exercises based on real-life scenarios.


  • Location: Oneconsult (Zurich, Bern, Munich) or as a company course on site. Remote also possible.
  • Duration: 4 days
  • Target Group: The Ransomware Training is designed for IT, CERT and CSIRT professionals.


Act now to protect your organization from ransomware! Book our Ransomware Training today and raise your employees awareness’ of potential attacks.

You might also be interested in
Illustrate the dangers of a cyber incident to your employees.
Illustrate the dangers of a cyber incident to your employees.
In the “Advanced Cyber Attack & Defense” training, you will learn the techniques and tools attackers use (offense). Acquire the knowledge and skills to understand and defend against cyber attacks.

Don’t miss anything! Subscribe to our free newsletter.

Your security is our top priority – our specialists provide you with professional support.

Availability Monday to Friday 8:00 a.m. – 6:00 p.m (exception: customers with SLA – please call the 24/7 IRR emergency number).

Private individuals please contact your trusted IT service provider or the local police station.

For more information about our DFIR services here:

Add CSIRT to contacts