Clean backups can restore dormant malware; MSPs now require isolated, telemetry-driven ransomware recovery testing under NIS 2.