You can’t control when ransomware attacks happen, but you can control how you respond.