Building operational resilience: what’s next?