Major corporate and government networks are better able to handle it, so long as you have top-down buy-in. Just publish a policy that anyone caught paying a ran

Major corporate and government networks are better able to handle it, so long as you have top-down buy-in. Just publish a policy that anyone caught paying a ransom will be fired, and throw a bit of money into PR puff pieces talking about your tough-on-ransomware policies. Ransomware makers won't try to target your network, since they'll won't get money from the CEO and will have a real hard time negotiating with people from other layers. Any incidental damage will get dealt with by various mitigation policies (backups, etc).