Organizations can only protect themselves from sophisticated attacks by building cyber resilience. And education and training remains to be the first steps.