Cybersecurity governance in alternative investment management: Building a resilient operational framework