New measures include mandatory reporting of all ransomware incidents and come after a spate of attacks on high-profile British targets.