ESG: the long road ahead to ransomware preparedness