One of the few guarantees in life is that we will encounter disruptive events. Two recent examples include the current ongoing scourge of ransomware and the (hopefully waning) pandemic. Both have caused and are causing enormous damages. Some organizations weather these storms far better than others. Although ransomware is relatively new, highly disruptive events and techniques to protect against them are not. We can learn a lot about ransomware by looking at how successful organizations have handled other highly disruptive events. What are the characteristics of organizations that survive these events with minimal damage, whether ransomware or other nasty occurrences? And what are the characteristics of those that have significant damage or in some case don’t even survive?