Cyber resilience begins before the crisis