After a hack, a company needs to improve security quickly and effectively. We outline the first steps to cyber-resilience.