Ransomware Recovery Time Calculator (RTO, ₹)

YOUR SET-UP

Your backups

The form starts with a typical office of fifty people. Change what differs.

What would need restoring

Data to restore (GB) Servers to rebuild Where the backup is Internet line (Mbps)

Your backups

How often they run Copies of the data, counting the live one A copy kept offsite or in the cloud? A copy no admin password can delete? Last time a full restore was tested

What downtime costs

Longest you can be down (hours) People who cannot work Average monthly cost per person (₹) Revenue lost per day (₹)

Our working figures, which you can change

Hours to notice and decide Local restore speed (MB/s) Share of the line a cloud restore gets (%) Hours to bring back an offsite copy Hours to rebuild and check a server Engineers working on it

Planning figures, not measurements. A timed test restore is the real number: put it in place of these.

Ransomware recovery report

1 Summary

Where the time goes

2 The figures

3 What this does not cover

Whether the attackers also copied data out: that brings the CERT-In six-hour report and the DPDP breach notice, whatever the restore time
Laptops, cloud services and SaaS data (Microsoft 365, Google Workspace), which need their own backups
Whether the backups themselves are already infected: restoring malware brings the attack back
The real speed of your restores: only a timed test shows it

A planning estimate from the figures you entered; our working figures are shown and can be changed. Guidance, not a guarantee. See the terms.

QUESTIONS

Asked often

The questions people search for before they run the check.

How long does it take to recover from ransomware?

It depends on how much data you restore, from where, and how many servers need rebuilding. For a mid-sized office, restoring a few terabytes over an internet line can take days, while a local copy can take hours. Most businesses find it is far longer than they assumed, which is why a timed test restore matters.

What is the 3-2-1-1-0 backup rule?

Three copies of your data, on two kinds of storage, one offsite, one offline or immutable so ransomware cannot delete it, and zero errors when a restore is tested. It is the rule most backup advice comes down to.

What is the difference between RTO and RPO?

RTO, the recovery time objective, is how long you can afford to be down. RPO, the recovery point objective, is how much work you can afford to lose, which is set by how often you back up. A daily backup means up to a day of work can be lost.

Why do backups need to be immutable?

Ransomware groups look for the backups first and delete them before they encrypt anything. An immutable or offline copy cannot be deleted with an admin password, so it is the one that is still there afterwards.

Does this calculator store my figures?

No. The figures are worked out in your browser and are not sent to us. If you ask for the report, we keep your details and a one-line summary of the result.

If ransomware hit today, when would you be back?

Your backups

What would need restoring

Your backups

What downtime costs

Where the time goes

Asked often

The backup is only as good as the restore