When patches fail: How to keep hospitals running when a ransomware attack hits