As ransomware operators shift their focus from stealing and extorting data to causing maximum disruption, businesses must build their resilience to cyberattacks