Avoiding a ransomware disaster doesn't require deep pockets — any organization can implement best practices that keep data safe.