A new report highlights what’s driving agencies to move beyond protecting their networks and focus more on how to sustain operations during attacks.