Cybersecurity: The Case for Zero Trust, Resilience and Regulation