Uploaded August 2026 | Updated September 2026, 1 hour ago
Technical Recovery Plan (TRP) Exercise in a Cloud-Native Environment: Practical Lessons from a Ransomware Scenario
Masanori Morino (KINTO Technologies Corporation, JP)
This session presents a practical case study of conducting a Technical Recovery Plan (TRP) exercise in a cloud‑native environment, triggered by a real‑world ransomware incident. The presentation covers the background and motivation for the exercise, the preparation process — including scenario design, product selection, and recovery planning — and the execution of the training itself.
Special attention is given to risk assessment and recovery strategies for AWS Aurora DB, as well as the challenges faced in restoring encrypted data and maintaining business continuity. Key lessons learned include the importance of clear communication, efficient information sharing, administrator‑account protection, and defining service‑level agreements (SLA) for recovery.
Attendees will gain actionable insights into operationalizing incident‑response methodologies and strengthening organizational resilience against ransomware and other cyber threats.
---
Masanori Morino is a member of KINTO Technologies’ Security & Privacy Department and also contributes to the Toyota Financial Services IS Team. His work focuses on product security and security governance, and he joined KINTO Technologies in July 2022. He developed an interactive information security education program using board games, applying participatory methods to make security risks tangible and relatable across departments, including the use of generative AI to craft realistic training scenarios.
Technical Recovery Plan (TRP) Exercise in a Cloud-Native Environment: Practical Lessons from a Ransomware Scenario
Masanori Morino (KINTO Technologies Corporation, JP)
This session presents a practical case study of conducting a Technical Recovery Plan (TRP) exercise in a cloud‑native environment, triggered by a real‑world ransomware incident. The presentation covers the background and motivation for the exercise, the preparation process — including scenario design, product selection, and recovery planning — and the execution of the training itself.
Special attention is given to risk assessment and recovery strategies for AWS Aurora DB, as well as the challenges faced in restoring encrypted data and maintaining business continuity. Key lessons learned include the importance of clear communication, efficient information sharing, administrator‑account protection, and defining service‑level agreements (SLA) for recovery.
Attendees will gain actionable insights into operationalizing incident‑response methodologies and strengthening organizational resilience against ransomware and other cyber threats.
---
Masanori Morino is a member of KINTO Technologies’ Security & Privacy Department and also contributes to the Toyota Financial Services IS Team. His work focuses on product security and security governance, and he joined KINTO Technologies in July 2022. He developed an interactive information security education program using board games, applying participatory methods to make security risks tangible and relatable across departments, including the use of generative AI to craft realistic training scenarios.
