6 critical mistakes that undermine cyber resilience (and how to fix them)