How businesses should respond to the ransomware surge