Aligning Ransomware Protection and Recovery Plans with Critical Capabilities