[RubyPinch]

you can postpone general updates while still having critical/security updates go through at the normal pace

And, shouldn't a workplace be setup for re-imaging if updates go wrong? I know its easy to just store files in C:\user\name\documents, but then it makes it just as easy to be forced to pay $300 for each computer in the network

[syshum]

Many of these systems infected are server systems, not End User Desktops.

That said, yes in a perfect world everyone would have perfect backups, and perfect imaging systems that makes ransomeware a non-event, we do not live in a perfect world and it is easy to monday morning QB the IT Staff.

Most IT depts are understaffed and corners are cut because you have to keep your head above water, business do not want to pay for proper staff or proper infrastructure,

IT is a "cost center" that should be cut every year in perpetuity, after all everything is working so why do I need to pay you to sit there all day