To embark on this journey toward a more resilient cybersecurity function, CISOs should focus on three key areas: building cyber fault tolerance in the business, minimizing the complexity of cyber toolsets, and fostering a resilient workforce capable of adapting to and recovering from cyber threats. By doing so, they not only enhance organizational security but also create an agile, forward-thinking cybersecurity culture.