Trace Security Ransomware Preparedness Assessment is a professional service that evaluates an organization's readiness to combat ransomware attacks. The assessment combines documentation review and personnel interviews to determine the implementation status of administrative and technical security controls. The service uses a custom control framework based on guidance from NIST, FFIEC, CISA, and CIS, organizing controls into three categories: Prevention, Detection, and Response & Recovery. Analysts review submitted documentation and conduct interviews to assess each control and provide recommendations focused on ransomware threats. The testing component includes external network scanning to identify vulnerabilities that could be exploited through ransomware attacks. The service also conducts simulated phishing campaigns sent to predetermined employee lists without whitelisting in email filters to test realistic scenarios. Users who fail the phishing test are documented in the final report. The assessment produces a comprehensive report detailing the organization's preparedness from administrative and operational perspectives, technical network security measures, and employee security awareness regarding ransomware-based threats. The service is designed to help organizations identify gaps in their ransomware defense capabilities and receive actionable recommendations for improvement.