Ransomware recovery depends on more than backups. Here's how to measure restore speed, validate RTOs and close the gaps that can prolong downtime.