“Corporates need to ensure that they are resilient — it’s no longer good enough to just have a risk management that fills out a risk register.”