Backup & Ransomware Plan 3-2-1 backups, RTO/RPO, restoration tests, incident roles and crisis communication.