If a foreign group disabled the power grid in a major city, we’d treat it as a national security emergency. But when ransomware shuts down a hospital’s ICU, we treat it as a compliance issue. That ...