No cybersecurity measure is 100% reliable. That's why agencies need a dose of resilience -- the ability to get back to normal — if a cyber attack were to succeed.