Change Healthcare's ransomware incident reveals continuing systemic failures and the need for robust risk management at all levels.