Works with the AI tools you already use

    Claude CodeClaude CodeCursorCursorCodex CLICodex CLIMuseMuseDotsDots+22 more

    Ransomware Readiness Assessment

    1

    Structured ransomware risk assessment generating weighted maturity scores and a phased hardening roadmap.

    $4.99

    Secure checkout via Stripe

    30-day refund guarantee

    Converts to your local currency at checkout

    Security scanned
    Ransomware Readiness Assessment

    Ransomware Readiness Assessment

    Example session with this skill installed

    Run a ransomware readiness assessment for Acme Corp. Start with the Identity and Remote Access domains.

    • Read your context and instructions
    • Compiled the ransomware readiness assessment
    • Generated the data export

    I will now begin the Ransomware Readiness Assessment for Acme Corp, focusing on Identity and Remote Access. I have initialized the tracking CSV and will present the high-weight questions first.

    Identity & Remote Access Assessment

    Control IDSecurity ControlRequirementResponseWeight
    ID-01Multi-Factor AuthenticationMFA is enforced for all remote access (VPN, VDI, SSH).Yes3
    ID-02Privileged Access ManagementAdministrative tasks require separate, non-email accounts.Partial3
    RA-01RDP ExposureRDP is not accessible directly from the public internet.No3
    RA-02Session TimeoutsRemote sessions automatically terminate after 60 mins of inactivity.Yes1

    Initial Maturity Score: 58% (Identity & Remote Access)

    Critical Gaps Identified:
    1.

    Public RDP Exposure: Internet-facing RDP is a primary entry vector for ransomware. Immediate closure or VPN encapsulation is required.
    2.

    Lack of Tiered Administration: Using standard accounts for admin tasks allows for credential harvesting and lateral movement.

    Next steps

    1. Complete the remaining 8 domains to generate the full weighted maturity report.
    2. Run python3 scripts/rr_assess.py score rr_answers.csv to generate the 30/60/90-day roadmap.
    3. Review the RA-01 remediation steps to disable public-facing RDP immediately.

    rr_answers.csv

    CSV · data export

    Generated

    Example file from a real run - the skill writes it into your workspace.

    Connects securely to your tools. The creator never sees your data.

    About this skill

    Ransomware attacks exploit predictable gaps in identity, backups, and network visibility. This skill provides a structured framework to audit these vulnerabilities and generate a prioritized hardening roadmap based on real-world attack patterns.

    What it does

    • Structured auditing provides a 60-question assessment covering identity, remote access, backups, and governance.
    • Weighted scoring calculates risk based on how often specific gaps appear in active ransomware intrusions.
    • Maturity mapping delivers percentage-based scores across ten security domains aligned to NIST CSF and CISA guidance.
    • Roadmap generation produces a phased 30/60/90-day remediation plan focused on high-impact gaps.

    How it works

    1. Initialize assessment to generate the standard questionnaire template or start a conversational audit.
    2. Collect evidence by marking controls as yes, partial, no, or not applicable with supporting notes.
    3. Analyze results using the scoring script to calculate domain-specific and overall maturity percentages.
    4. Export reports to Markdown to view prioritized gaps and the structured hardening roadmap.

    Frameworks & tools

    The skill utilizes Python scripts for template generation and scoring. It aligns with CISA #StopRansomware guidance, CIS Controls, and NIST CSF standards.

    Why this beats prompting it yourself

    Generic prompts often miss the technical weighting required to prioritize MFA and immutable backups over lower-impact policy gaps. This tool uses a weighted algorithm to ensure the 30-day roadmap addresses the most likely attack vectors first.

    Use cases

    • Insurance readiness to prepare for cyber insurance renewals and policy requirements.
    • Executive reporting to provide leadership with a clear percentage-based maturity score.
    • Annual audits to track defensive improvements over time against NIST and CIS standards.

    Known limitations

    Requires Python 3 for the local scoring script. Results depend on accurate self-reporting of control implementations.

    How to use

    Skills on Agensi run inside your AI agent. Copy the prompt, paste it into your agent, and it connects to Agensi and installs this skill for you. If a payment is needed, your agent shows it to you first.

    Reviews

    No reviews yet

    Be one of the first to try it. Every listed skill passes our trust checks below.

    Security scanned

    Passed our 8-point scan before listing

    Fresh listing

    Recently published to Agensi

    30-day refund

    Not a fit? Get your money back

    Trust & safety

    Security scanned

    Verified clean 1 day ago

    • Passed all security checks, Safe to install

    Listed1 day ago
    Updatedtoday

    What's inside

    Frequently Asked Questions