Backups are essential, but they work best when the company also improves how files move, how devices are used, and how unusual activity is reviewed before a real incident happens.