Two cybersecurity drills needed annual to test readiness.