A ransomware recovery plan addresses a ransomware attack by having an incident response team, communication plan, and instructions to recover data.