This is not a dress rehearsal: What critical infrastructure owners and operators can do right now to defend against nation-state threats