If the ransom is low, say $300 for a multimillion-dollar organization, then it might make sense to adopt a hybrid approach.
This could include simultaneous efforts to pay the ransom, to triage the system, and to attempt to restore from a backup server....
This could include simultaneous efforts to pay the ransom, to triage the system, and to attempt to restore from a backup server....