The experience and habits of IT departments when it comes to ransomware and data recovery were analyzed in a recent report by Arcserve.
https://www.securitymagazine.com/articles/99530-36-of-government-it-does-not-have-a-documented-disaster-recovery-plan