The problem with paying the ransom is that you tell the bad guys, "If this happens again, I will pay you," so you go on the list of repeat targets, likely for a higher ransom amount. Certainly, if you don't have secured backups of your data, you need to start making them.
When all is said and done, three items are necessary to protect your organization from modern-day phishing attacks:
Don't put it off any longer!
Sign up for CIO Asia eNewsletters.