Better Contingency Planning for Enterprise Cybersecurity