The ransomware alert arrived at 1:47am. The MDR provider responded within minutes — at least, that is what the proposal promised. The question nobody asked during procurement was simple: responded ...