" b) BACKUP YOUR DATA"
c) Store your backups outside of your network
d) test restoration from time to time.
maybe educate your idiots
Education: that's the most important part. Whatever the technical means, we can maybe deflect 1/3 of the attacks. The rest lies into the hand of users. they are the first line of defence, they must be integrated into the protection system. So shout the message, shout it again (education is also repetition), and again and again every 3 months.