Preview image. Unlock full-res
White figure slide with body copy left and a full-width barcode-style line chart comparing ransomware lifecycle with and without law enforcement.
Summary
Figure 23 slide: a wide, barcode-style chart of thin vertical lines comparing ransomware time-to-identify and time-to-contain with versus without law enforcement, with body copy at far left.
Visual description
White slide with standard chrome. A narrow left column opens with a bold lead-in ("Figure 23. Law enforcement helped shorten time to identify and contain ransomware breaches.") into body. The right four-fifths is a distinctive chart titled "Time to identify and contain a ransomware attack with law enforcement involvement." Rather than solid bars it uses a dense field of thin vertical hairlines (a barcode or sparkline look) shading from blue at left through violet to magenta, with two horizontal reference bands: an upper "Law enforcement not involved" row totaling 306 (226 + 80) and a lower "Law enforcement involved" row totaling 273 (210 + 63). Large light-gray segment numbers (226, 80, 210, 63) and bold black totals (306, 273) label the ends; an MTTI/MTTC legend sits bottom-left.
Key takeaway
The barcode treatment, swapping a chunky bar for a comb of fine vertical lines, gives a familiar MTTI/MTTC comparison a more editorial, less spreadsheet feel while still being readable. Oversized faint segment numbers plus bold totals create a clear value hierarchy.
Reuse notes
A nice way to dress up an otherwise routine two-row lifecycle comparison when you want a full-width hero chart rather than a panel. The thin-line aesthetic ties back to the deck's generative divider graphics. Use sparingly; it is more decorative than a plain bar and can be harder to read precisely.
From this deck: Ransomware lifecycle by law enforcement barcode chart
View deck
