[cm2187]

In fact backups is not enough. It has to be offline backups, which raises the bar quite a bit. Backing up to a network drive doesn't even help, and I am not aware of any wildly used "write once-only" network drive capabilities.

[meowface]

Backup to an external hard drive that you only leave connected during the backup, or a cloud service (ransomware could theoretically target these but so far have not), or do a "pull-style" backup where the machine doesn't have write access to the backup location.