Enforce it at the cyber insurance provider level, if you pay out a ransom for a client you risk losing your insurance license.