Cyber security in 2027: resilience through strategic governance and autonomy