Malware that encrypts or steals data to extort a ransom, and the defences against it. Covers how attacks get in and spread, prevention and early detection, immutable and isolated backups, incident response and recovery plans, and regulatory reporting.