How Healthcare Organizations Can Reduce Cyber Extortion Risk