To combat ransomware, organizations, literature and research efforts focus on technical measures and neglect procedural countermeasures (e.g., incident response plan, business continuity plan, and communication plan). We argue that detailed case studies and best practices need to be shared to allow companies to adapt their strategies to be better prepared.