Skip to content

Cyber Resilience

What is Cyber Resilience?

An organisation's ability to continuously deliver intended outcomes despite adverse cyber events. Goes beyond cybersecurity to include preparedness, response, and recovery.

Information Security

Related terms

Business ContinuityIncident Response

Frameworks that govern cyber resilience

NIST Cybersecurity Framework 2.0View framework →ISO 27001:2022View framework →CIS Controls v8View framework →

What the standards actually require on cyber resilience

Requirements naming cyber resilience across 6 standards, quoted from the control text.

IACS Unified Requirements E26/E27 - Cyber Resilience of Ships and On-Board Systems4 controls

UR E26 Goal 1 (Identify) also requires a Ship Cyber Resilience Plan (SCRP) covering scope + assumptions + roles + responsibilities + risk assessment methodology + control measures + maintenance procedures + incident response + recovery + training.

IACS-UR-E26-Identify-Plan-Risk-Survey-Documentation · IACS UR E26 Identify Goal - Ship Cyber Resilience Plan + CBS Risk Assessment + Survey + Documentation →
Japan FSA Cybersecurity Guidelines for Financial Institutions3 controls

Business Continuity + Cyber Resilience is core per FSA Cybersecurity Guidelines + intersects with FSA Operational Resilience Framework (2023) + BCBS Principles for Operational Resilience (March 2021) + CPMI-IOSCO Guidance on Cyber Resilience for FMIs.

JP-FSA-CYB-Business-Continuity-Cyber-Resilience-RTO-RPO-Backup-Immutable-Air-Gapped-Disaster-Recovery-Ransomware-Resistance · Japan FSA Cybersecurity Business Continuity + Cyber Resilience + RTO + RPO + Backup + Immutable + Air-Gapped + Disaster Recovery + Ransomware Resistance + Operational Resilience + Critical Function Mapping + FSA Operational Resilience Framework →
Monetary Authority of Singapore Technology Risk Management Guidelines2 controls

Implement Cyber Resilience per MAS TRM Chapter 11 including Cyber Threat Intelligence + Penetration Testing + Vulnerability Assessment + Cyber Incident Response and Notification.

MAS-TRM-Cyber-Resilience-Chapter-11-Threat-Intelligence-Penetration-Testing-Incident-Response-1-Hour-Notification · MAS TRM Cyber Resilience + Chapter 11 + Threat Intelligence + Penetration Testing + Incident Response + 1-Hour Notification →
ASIC Cyber Resilience Good Practices1 control

Treat cyber resilience as a critical management tool for understanding risk and informing investment decisions.

ASIC-CR-GOV-2 · Treat cyber resilience as a management and investment tool →
Kuwait National Cybersecurity Framework1 control

Kuwait NCF Respond and Recover functions. Incident Response and Reporting: documented Incident Response Plan + Computer Security Incident Response Team (CSIRT) + 24/7 incident hotline + Incident classification (severity + impact + urgency) + Triage + Containme...

KNCF-Respond-Incident-Response-Reporting-Recover-Business-Continuity-Cyber-Resilience-NCSC-Notification · Kuwait NCF Respond + Incident Response + Reporting + Recover + BC + Cyber Resilience + NCSC →
UK Security and Emergency Measures Direction (SEMD) - Water Industry1 control

Companies must demonstrate holistic resilience covering both cyber protection and recovery capabilities.

SEMD-CS-3 · Cyber Resilience →

Questions people ask about cyber resilience

What is Cyber Resilience?
An organisation's ability to continuously deliver intended outcomes despite adverse cyber events. Goes beyond cybersecurity to include preparedness, response, and recovery.
Why is Cyber Resilience important for compliance?
Cyber Resilience is a key concept in Information Security. Understanding cyber resilience helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
What concepts are related to Cyber Resilience?
Key concepts related to Cyber Resilience include Business Continuity, Incident Response. Understanding these interconnected concepts provides a more comprehensive view of Information Security requirements and helps organizations build holistic compliance programs.
Which compliance frameworks address Cyber Resilience?
Cyber Resilience appears in the requirement text of IACS Unified Requirements E26/E27 - Cyber Resilience of Ships and On-Board Systems, Japan FSA Cybersecurity Guidelines for Financial Institutions, Monetary Authority of Singapore Technology Risk Management Guidelines, ASIC Cyber Resilience Good Practices, Kuwait National Cybersecurity Framework. Across these standards we have identified 12 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Cyber Resilience?
Explore our compliance framework pages to see how cyber resilience applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Cyber Resilience applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.