In light of a recent series of ransomware attacks, the draft urges such businesses to take measures, including taking out cybersecurity insurance.