NIST just published their Ransomware draft.
I suggest reading it, it is useful both for your certification studying as well as your daily work.
Cybersecurity Framework Profile for Ransomware Risk Management
https://csrc.nist.gov/publications/detail/nistir/8374/draft