Patch management plays a key role in agencies fending off ransomware.