When paying fails: why UK firms need an alternative ransomware playbook

New UK rules restrict ransom payments and require attacks to be reported within 72 hours. Firms that once quietly paid now need backup and recovery plans that work without the attacker's key.