From techtarget.com
Ransomware attack recovery is a critical activity that IT cybersecurity teams typically address. Business continuity cannot be a footnote in this process. Ransomware attacks can disrupt operations, but if an organization uses and stores sensitive information, it must also be prepared to maintain business continuity if that information is compromised.
In a ransomware attack, multiple emergency plans can come into play. Assuming IT teams launch the ransomware response plan quickly, and cyberthreat technology does its job, it might not be necessary to activate other plans.