A ransomware payload has executed. Email is down. Staff are panicking. The board wants answers. What happens in the next 24 hours will determine whether your organisation recovers in days or in months...