How to defend organisations against malware or ransomware attacks