As compliance evolves, operational resilience becomes the real benchmark