Building cybersecurity sophistication and resilience for modern financial firms