Let’s face it—preventing a ransomware attack is hard. Some may say it is near impossible even with the latest technology and a sound defense-in-depth approach. So, if there’s no surefire way to prevent an attack, recovery is the next best option. Within a ransomware recovery plan, though, there lies many decisions and nuances. For example, what should the priority be—quick recovery and return to operations, forensics to determine the cause of the attack, or minimizing data loss during recovery?