A Cyber-Resilience Model for Striking the Right Balance between Business and Security