Operational cyber-security has moved from a technical back-office function to a core component of organisational resilience. As regulators and governments increasingly frame cyber-risk as a systemic issue, real-time defensive capability is now as important as governance frameworks.