Re: Mitigation against ransomware:
"IT doesn't control the budget, and the board doesn't like IT as they're a cost. So now what?"
If the board can't see that IT brings value to the busienss, whose fault is that?
If there was a Car Fleet department that couldn't do its job properly, e.g. keep the fleet properly maintained, what would happen to the department? Does it make any difference whether the fleet (and its management) is owned, leased, or outsourced?
Cars have a cost of ownership, as well as a cost up front. But they do at least have a second hand value most of the time.
Same goes for computers (apart from 2nd hand value), especially ones running Windows. Anyone who has done their best to hide the hidden costs of ownership in recent years (Compaq, Dell, HP, MS, etc) has helped sow the seeds of this weeks mess.
A change is gonna come again, once the people in charge see what's cost effective and what's not.