A well-trained workforce familiar with cyber security issues can help companies train for emergencies, respond effectively and learn from their experiences. A truly resilient enterprise dynamically innovates and changes its practices, policies, and processes, both in response to changing threats from the outside and changing requirements from the inside. Resilience is achievable, but companies will have to change the way they operate to reach their goals.

Roger Cressey is a senior vice president with Booz Allen Hamilton where he supports the firm’s cyber security business. He was former deputy for counterterrorism, National Security Council, at the time of Sept. 11, 2001 attacks, and featured in a recent story on Breaking Gov.