Ransomware is increasingly complex in terms of targeted attacks, it's no longer just someone encrypting your file server. Also you need to work out HOW they got in, not just fix the actual ransomware otherwise they come back tomorrow.
I know large companies that effectively closed for almost a week trying to figure out what happened and how to fix it. They could have restored from backups in a matter of hours.
Ransomware is increasingly complex in terms of targeted attacks, it's no longer just someone encrypting your file server. Also you need to work out HOW they got in, not just fix the actual ransomware otherwise they come back tomorrow.
I know large companies that effectively closed for almost a week trying to figure out what happened and how to fix it. They could have restored from backups in a matter of hours.