Although the worst of the disruption may be behind us, future shocks are inevitable. Many firms seem to be doing little work to improve their resilience