What to do to prevent a ransomware attack

Although it may not be easy, segment your network. Grant staff access only to the data they need. Cordon off especially sensitive data into a restricted area and encrypt it