Australia's government released its draft Ransomware Action Plan, a comprehensive framework for dealing with all facets of ransomware attacks. The 16-page proposal includes reporting requirements for companies, a new criminal penalties scheme and victim resources. The plan also calls for companies to avoid paying ransoms at all costs, noting how it "does not guarantee a successful outcome" given that encrypted systems and sensitive data remain vulnerable after those payments. There is no timetable for government consideration and adoption of the plan.