Cybersecurity, executive leadership and ransomware: To pay or not