ISO/IEC 27001 and ISO 22301 - How to ensure business survival against cyber attacks?