Ransomware:

Gains privileged access to computers through initial infection vectors or other malware and stops services and processes to carry out encryption activities. With files "locked" with an encryption key that only the attacker possesses, the impacted user is asked to pay money$-$often in the digital currency bitcoin$-$to reinstate access to the encrypted files. Ransomware in itself is not the real risk.

It also:

is similar to Phishing

Only includes Ransomware$-$as$-$a$-$service $($RaaS$)$ now enables less$-$skilled malicious actors to employ this threat tactic, with high reward for little effort or technical knowledge.

impacts on government agencies

included the risk in impacting the business through sudden disruption or removal of a service or process or through a loss of reputation.