Ask HN: Best practices small companies ransomware?

I advise a few small companies, community associations and local governments and am wondering about any pointers, tips or information (resources?) regarding what they could or should be doing to prevent ransomware attacks.