A form of malware that encrypts an organization’s data, demanding payment for its release, making robust backup plans and incident response frameworks essential for CISOs.