Building cyber resilience through asset and vulnerability management