When it comes to ransomware, your fightback should start long before youre attacked