Recovery from a cyber attack is "a matter of time"