The UK government has confirmed mandatory ransomware reporting within 72 hours, a payment notification regime for private businesses, and a payment ban for public sector bodies. Here is what SMBs need to do to prepare.