“Boards that were quickest to adapt to the COVID-19 crisis are now focusing more on specific external risks than on corporate resilience overall.”