Ransomware.

Your Incident Response Plan Is Modeling the Wrong Threat Actor

LockBit dominated tabletops for years. The ransomware ecosystem has rotated. The groups hitting organizations right now are not the ones your IR team practiced against, and that gap has consequences.