The city of Baltimore should have been prepared with a recovery strategy and been able to recover within much much less time. That time would be dictated by a risk assessment guiding how long they can afford to be down, they shoud have been ready, especially after the previous attack, to recover from ransomware.