Stopping a Ransomware Attack Before it Happens: Advice for State and Local Governments