Cyber resilience is an organization's ability to anticipate, withstand, recover from and adapt to adverse cyber incidents.
Cyber resilience integrates cybersecurity (prevention) with business continuity (recovery). It combines ISO 27001 (security), ISO 22301 (continuity) and frameworks like NIST CSF. It assumes incidents will occur and prepares the organization to minimize impact and restore operations quickly.
Cybersecurity seeks to prevent attacks. Cyber resilience accepts they will occur and focuses on operating during incidents and recovering quickly.
Achieved by integrating ISO 27001 (security), ISO 22301 (continuity), ISO 31000 (risks) and ISO 27002 controls for incident management and recovery.
Need an assessment in this area?