The ransomware threat has spooked nearly everyone. A big unknown is how vulnerable your organization actually is to ransomware attacks.