If your business falls victim to ransomware and you want simple advice on whether to pay the criminals, don't expect much help from the US government. The answer is apt to be: It depends.