Building cyber resilience with security