ISA6070 Wanna Cry Video Analysis

Review the following two videos on the ‘Wanna Cry’ attack.
Details:
With this assignment, you should make connections and discuss the risk management and performance measurement process. Explain why companies do or do not take risks when they don’t do updates for some reason (i.e. cost, software compatibilities, hardware compatibilities, etc.). After the ‘wanna cry’ outbreak how are those risks being looked at now and why?
Topics to Focus On:
Explain ‘wanna cry’ in summary.
What causes ‘wanna cry’?
What resources/practices could have prevented the attack?
What are the risks and why would companies not perform updates?
Could this have been prevented by an audit or some checks and balances?
Requirements:
APA style.
4 peer reviewed sources published within the past 3 years.