The recommended best practice is that your data and systems are backed up in at least three different places.
- Your main storage area (file server)
- Local disk backup
- Mirrors in a cloud business continuity service
In the event of a ransomware disaster, this procedure will give you the best chance of restoring your data.