Companies must build the capabilities to anticipate, detect, diagnose, activate resources for, protect against, and track known and unknown-but-knowable risks.