Operational Resilience and Cyber Risk: Is Fresh Thinking Needed?