Resilient businesses have clear, detailed plans to tighten security and respond to breaches. Here’s what should be included.