Carry out emergency response to ransomware in your company

How does your company carry out emergency response to ransomware? Is it just a matter of gathering relevant personnel together to discuss in specific roles? Do you need to deploy computers or servers with ransomware for actual demonstration? Are there any corresponding projects or documents for actual demonstration that can be used for reference? Thank you very much.

can computers cybersecurity demonstration deploy discuss documents emergency gathering matter personnel projects ransomware relevant response roles servers