I am a security engineer, and I understand this argument. BUT if I were a decision maker in a corporation, it would be reasonable to pay a couple of hundred buc

I am a security engineer, and I understand this argument. BUT if I were a decision maker in a corporation, it would be reasonable to pay a couple of hundred bucks and get back to work rather than think about what is "good for everyone". Also, as an industry, we need more measures to deal with the Ransomware problem beyond just telling companies not to pay. We preached them to patch their OS and they didn't listen, what makes us think that they will listen when we advise not to pay the ransom when their data and reputation is at stake?