Move from reactive security controls to proactive cyber resilience with strategies to identify risks early, strengthen defences and improve response.