>"the most basic offline redundancy" How many people you meet everyday that are not in IT even knows what offline redundancy means? I think what your suggesti

>"the most basic offline redundancy" How many people you meet everyday that are not in IT even knows what offline redundancy means? I think what your suggestion amounts to, is effectively a mandate on SMBs having either an in house security team, or a contract with a consultancy on cyber security. That's a huge burden. It's not really easier than local tax code. These things change much more frequently and it's not like you can just walk into a local H&R Block to take care of your cybersecurity needs. Ransomeware, as it is now, didn't even exist (or is that popular) 10 years ago.