DCIG finds it almost a statistical certainty that every organization will at some point experi- ence a ransomware attack. This likelihood of an attack translates into the need for cyber resilience software and technologies to expect an actual attack to occur. In anticipation of an attack, these products should continually take steps to defend the organization's data.