A CISO's Guide to Resilience