How your company can measure its 'cyber resilience' and evaluate its posture