Ransomware is malware that encrypts a user's files and then demands payment (a ransom) in exchange for the decryption key. The user's inability to open the files and the message indicating they're encrypted are classic signs of a ransomware attack.

A VPN creates a secure tunnel from the user's home network into the corporate network, providing the necessary routing and access controls for the laptop to reach internal file servers.
Without a VPN, the device remains outside the corporate LAN and cannot directly reach protected resources.

Verifying the VPN status is the first step because remote access to internal accounting databases typically requires an active VPN connection to reach internal network resources.

Adjusting the Privacy (Security & Privacy) settings allows the user to override macOS Gatekeeper restrictions and permit the installation of an unsigned third-party application.

An MDM (Mobile Device Management) management profile allows administrators to enforce corporate policies on Apple devices, such as restricting app installations, configuring network settings, and applying security restrictions. This profile is installed on the device and centrally managed to ensure compliance.