A must read for everyone, although some mitigation options listed are quite expensive and others only possible in highly-managed Enterprise environments.
Full SEI Article -
https://insights.sei.cmu.edu/sei_blog/2017/05/ransomware-best-practices-for-prevention-and-response.html