As a federal zero-trust deadline looms, agencies need a comprehensive cybersecurity strategy that also recognizes the importance of cyber recovery and resilience.