Backups
I can't speak for the experiences at other universities, but the one I work for restores from backup when attacked by ransomware.
Bournemouth University in the UK was hit by 21 ransomware attacks in the past 12 months, according to records unearthed by a Freedom of Information request. The request was made by endpoint security firm SentinelOne, which also revealed to The Register that 60 per cent of 71 universities it questioned had been hit by …
We used Point-in-Time backups that go back over two years AND have tape going back five on all network shares. Biggest issue is staff putting "can't live without" things on their desktops instead of on the network servers.
Our format and reinstall policy for a badly infected PC / laptop has caught a lot of folks out.