The Resilience Rundown: Action Bias in Cyber Security