Understanding the management of cyber resilient systems