Michael Wylie (TheMikeWylie) Atlanta spent millions to clean up the Ransomware attack earlier this year. Could the city have been better prepared? Would the damage have been so crippling? Lack of resources often leads to gaps in security posture leading to costly and inconclusive incident response ventures. This talk will use the recent Atlanta ransomware incident and how the city responded to it. We will use Atlanta as a case study in examining the costly mistakes of being underprepared. The goal of this presentation is to provide insight into IT and organizational decision makers of the incident response process, costs, outcome, and how preparing can prevent costly IR ventures. This talk will cover the following topics: • The Atlanta ransomware incident and timeline • Incident Response process • The true costs of being underprepared