IT professionals recommend keeping Windows fully updated for security, and keeping reliable daily backups, so that if you’re hit you can just wipe the PC and restore your data. When the NHS was hit by WannaCry, no patient data was stored on the affected machines and they did not pay the ransom – they just spent the next day reimaging thousands of PCs afresh.
