Ransomware is evolving to strike, not only at your data, but the backups of that data/image as well. Anyone who depends on IT to run their business needs to ensure that data protection and data backup are considered as parts of the same whole and cannot be treated as discrete elements.

Along with this, the server-centric view of data protection needs to be moved to a network-centric view with protection beginning at the edge of the network (endpoint management).

Of course, the above does you no good unless employees are regularly trained in cyber-security best practices.

If your IT department, or IT provider, are not aggressively developing and implementing a cohesive, end-to-end data protection/backup plan, you should ask them why.