I despair at listening to RNZ's coverage of the Waikato hospital ransomware attack... I suspect that the wrong conclusions are being drawn from advice taken from people with vested interests in foreign corporate businesses. It's only going to get worse from here.
The problem is serious, but it's not about the amount of money being spent (as suggested by the pundits), but rather broad ignorance among the *pros* who've been entrusted with managing these networks. Education, not $, is the issue.