Could you recover from ransomware tomorrow?

Eight questions, two minutes. You get a score and the first three things to fix.

Do you back up every important server and database automatically, at least once a day?
Is at least one copy of your backups out of reach of your network, so ransomware can't delete it?
Have you restored a whole server from backup in the last three months?
Do you know how long it would take to bring your main system back after a failure?
Would you be alerted if your backups stopped working tonight?
Does deleting backups require approval from more than one person?
Are your backups scanned for malware before you restore them?
Are your backups encrypted, with keys only your organisation controls?