Security Think Tank: Patching, backup and access control key to resilience

What key things should organisations be doing in terms of cyber defences to ensure they are resilient?