Shift to cyber resilience: 7 steps to a better security approach