SANS Institute blog post on how security awareness professionals can communicate to their workforce about ransomware.