A practical approach to cyber resiliency