If companies aren’t already putting their teams in simulated cyber warfare environments, they’re not ready.