The technical controls that provide the most anti-ransomware capabilities for the dollar are not necessarily expensive or require much in the way of staff to manage, such as multi-factor authentication, regular data backups, and enforcing good access policies, such as the principle of least privilege.
Article Link: Ransomware: How small security teams can mount a better defense | SC Media