© 

... a minimal assignment of rights. If groups such as "Everyone" or "Domain users" are used for data containers (such as folders and SharePoint sites), entire hierarchies are shared with all users in a company. Removing such groups and assigning only the necessary access rights makes it much more difficult for attackers to encrypt all files.