Determining how hard a target you present for the current wave of human-driven ransomware involves multiple considerations. There are four steps to analyzing how prepared you are for a ransomware attack: How easy it is to break into your environment in the first place. How difficult is it for an attacker to escalate privilege, move laterally and get access to data and systems critical to your business? How easy would it be to exfiltrate large amounts of data from your environment without detection? How confident are you of your ability to quickly restore your environment from backups?”]
Source: https://threatpost.com/how-ready-ransomware-attack/168837/