Calculate ransomware risk from backup status, email filtering, EDR, MFA, network segmentation, and IR readiness.