All organizations—public, private, profit, non-profit, small, large, and anywhere in-betwee—recognize ransomware poses a risk to their operations. Further, many of these same organizations have already experienced a ransomware attack. A recent survey of over 1,100 information and operational technology professionalsfound 80 percent had experienced a ransomware attack. Of those, over 60 percent paid a ransom with 52 percent of them paying a ransom of at least $500,000.1