Efficient Ways CISOs can Evaluate Their Cyber-resilience