How CISOs Can Build Great Defense Against Ransomware-related Lawsuits