Security Thank Tank: Business resilience should be proactive, not reactive

How can companies best assess business resilience to identify the gaps and improve business resiliency to reduce the effect of cyber attacks?