Although security leaders cannot anticipate every new threat, there are ways to mitigate risk and establish resilience against attacks.

Security leaders are now expected to provide evidence to boards, customers and regulators that their teams are prepared for potential cyber crises.

Cyber resilience requires a holistic approach to risk reduction — people, processes, and technology all continually optimized as the nature of the threat landscape changes.