Backups...
...here I'm synchronizing (one way) all files to a server on an hourly (or so) basis. Files that get deleted by accident is not deleted on the target server.
Then there's another server which is used for a monthly backup - since it's quick just to synchronize changed files (but not deleted) across. (Tape is taking too bloody long).
Then, finally, a tape backup to commit to long-term all the files/directories directly from the main server. A 5-day backup job.
Last time I had cryptolocker, I was able to recover files from the monthly server quick quick after zapping the cryptolocker'd PC. No need to wait for 5 days or so for files to be restored from backup.
And the backup server and tape streamer PC is in a different building (at last) than the main server.
I'm a lazy bastard, and have no wish to restore a file server from scratch.