Problem
Recently, an employee at your company had their work account hacked (compromised) and this led to a ransomware attack. It appears the attacker obtained the users password, although it is not known how. What can you do to reduce the chances of this happening again, and what can you do to be better prepared if it does happen again?