Keeping your Operating System and software up to date is one of the most important steps to protect your home or small business. Operating systems and software is updated regularly to fix security vulnerabilities as these are found. If you are not applying updates then you are leaving your system vulnerable to attacks that exploit these vulnerabilities.
Ransom ware is increasingly common problem for businesses who are targeted by organised crime to demand payment to recover data. Generally it is not recommend that you pay to recover your data because there is no guarantee that the data will be restored and you will be more likely to be targeted again. The best protection against ransomware is to have multiple backups of all your data and systems including one copy that is off-site.
Enabling automatic updates is recommended to ensure that your Operating System and software always has the latest updates to protect against known vulnerabilities. Most large-scale recent ransom ware attacks, such as WannCry and Petya, have used known vulnerabilities that impacted older operating systems. An upgrade plan should be developed for any systems and software that are no longer supported. Otherwise these systems will not receive updates to correct vulnerabilities which can be exploited.
You should also control who has administrator or privileged access to systems. Administrator access should only be granted to those who require it for their role and are trusted individuals. That might mean preventing children from installing software without permission from a parent.