Boards ask a simple question that security teams struggle to answer simply. Are we resilient? The honest answer usually turns up as a sixty-page report, a heat map and a list of findings, none of which tells a director whether the position improved since last year or where the next naira should go.