When organisations are hit by ransomware attacks and business operations go down, there’s often a rush to blame. Who’s responsible? Who should resign? Less often is the question: What can we learn from it? As cyber incidents become more a matter of inevitability, it’s increasingly critical that businesses also invest in their operational resilience – so that even if they are attacked, they can still function and provide essential services. That’s especially important for the likes of healthcare providers, government bodies, but even shipping companies.