To make a rational risk assessment about any scenario, you need to know what the possible outcomes are, and the consequences of each outcome. The alternative to proactive investment is reactive crisis response, which most frequently manifests in the form of this question when it comes to ransomware: “Do we pay the ransom or not”? […]