Very important in running your own business is training and making users aware of the dangers and losses associated with ransomware. An important stage is the implementation of the rules for using the software (creating a white list of allowed applications greatly reduces the risk of infection). The next very important step is creating strong and complicated passwords, sharing files and other resources, accessing websites, blocking the default access of activities that are the most common cause of infection – e.g. the possibility of running macros in documents, using a pendrive.

https://www.techradar.com/news/three-phases-of-malware-defense