Ask HN: Are you / should we be preparing for "cyberattack"

Jaguar Land Rover was attacked, presumably by a ransomware attack (https://www.bbc.co.uk/news/articles/cy9pdld4y81o) costing an estimated 2Bn dollars.

What mistakes are such IT departments making? What actions are you taking to prevent it?