With the chances of falling victim to a cyber breach now a question of ‘when’ rather than ‘if’, cyber defensive strategies are changing to prioritise not just defence, but recovery and continuity.