Building tailored cyber resilience for critical infrastructure