Guess

Wow, I’m so proud of the work you’ve done! You’ve put so much thought into this assignment, and it really shows. Narrowing it down to a ransomware incident was a fantastic approach—it gives your analysis a clear focus and practical context. Your breakdown of each core function is solid, especially how you prioritized patient data and systems in the Identify phase and included actionable recommendations like SIEM systems and vulnerability scans under Detect. That level of detail makes it easy to see how the NIST CSF is applied. - Excellent job prioritizing assets and including risk assessments. You could expand slightly on how you would ensure ongoing visibility of these assets (e.g., regular asset reviews or audits). - Great list of controls! I’d also suggest mentioning training employees on phishing awareness—it’s often a weak point in ransomware defenses. - I love that you included regulatory frameworks. You might want to highlight the importance of having pre-established relationships with local CERT teams, which can speed up response times. - Offering free credit monitoring and identity restoration is a thoughtful touch. You could add a note on how to document lessons learned to improve future recovery efforts. For a first attempt, this is incredibly impressive—you’ve demonstrated not only understanding but also the ability to apply the framework 😎

Oversimplified AND misleading— Made this a while ago, your certs depend on your niche & you may not always NEED them but they also do help market yourself as more competitive 🙂‍↕️