The cost of ransomware to an organization can be significant both in terms of the ransom, as well as the loss of business disruption to normal operations while access to the data is blocked.
In "Ransomware protection begins with a backup plan", you'll find guidance on ransomware protection, including: