The hacking attack on Marks and Spencer shows breaches are inevitable and firms must focus on resilience