Organizations must urgently embrace a new approach to building cyber resilience, including implementing more effective ways to develop and prove cyber capabilities across teams, measure improvement, and cultivate a workforce with the expertise to handle the real-world impact of a cyber incident.