“Don’t start from here” is the kind of advice you’ll receive when undergoing a ransomware attack. There are some things you should do now as part of best practise. One thing that I’d add here is to make a distinction between backups (which change) and archives (which don’t). Keep both…:
[…] Given the rising number of ransomware attacks targeting businesses, the consequences of not having a secure backup and detection system in place could be catastrophic to your business. Investing in a solution now helps ensure you won’t make a large donation to a nefarious organization later. Learning from the mistakes of other organizations can help protect yours from a similar fate.