Why Are Organizations Losing the Ransomware Battle?

This commentary warns that ransomware incidents are increasing largely because many organizations fail to maintain foundational cybersecurity controls—illustrated by the Change Healthcare/UnitedHealth breach—and recommends recommitting to basic controls (like 2FA and encryption), institutionalizing those practices through policy and resourcing, and continuously measuring control effectiveness to improve resilience.