0 The New US Ransomware Law – Is Your Network Ready? Under the Act, organizations must show that data is preserved from the moment an incident or vulnerability is detected until the incident is closed out.