While the idea of banning ransomware payments may be well-intentioned, many organizations are simply not prepared.