The ongoing ransomware attacks have everybody spooked. Congress and the Cybersecurity and Infrastructure Security Agency are both contemplating ways to get industry to do something they've supposedly been doing for years.