Cyber Resilience
What is Cyber Resilience?
An organisation's ability to continuously deliver intended outcomes despite adverse cyber events. Goes beyond cybersecurity to include preparedness, response, and recovery.
Related terms
Frameworks that govern cyber resilience
What the standards actually require on cyber resilience
Requirements naming cyber resilience across 6 standards, quoted from the control text.
Intermediate control principles for cyber resilience oversight (required, with baseline, of an AI whose inherent risk is medium). A cyber risk appetite statement is approved by the board or a board committee;
hkma-cyber-resilience-assessment-framework-c-raf::1.1.I · 1.1 Cyber resilience oversight: intermediate level →The bank proactively promotes awareness of its cyber resilience objectives among customers.
rbi-cybersecurity-framework-for-banks::208 · Para 208: promote cyber resilience objectives among customers →Treat cyber resilience as a critical management tool for understanding risk and informing investment decisions.
ASIC-CR-GOV-2 · Treat cyber resilience as a management and investment tool →Delegated Regulation (EU) 2026/339, adopted on 16 February 2026 and published in the Official Journal on 29 April 2026, repeals this Regulation with effect from 11 December 2027, the day the CRA, Regulation (EU) 2024/2847, becomes fully applicable.
eu-delegated-regulation-eu-2022-30-radio-equipment-cybersecurity::3.2 · Repeal from 11 December 2027 and the transition to the Cyber Resilience Act →Kuwait NCF Respond and Recover functions. Incident Response and Reporting: documented Incident Response Plan + Computer Security Incident Response Team (CSIRT) + 24/7 incident hotline + Incident classification (severity + impact + urgency) + Triage + Containme...
KNCF-Respond-Incident-Response-Reporting-Recover-Business-Continuity-Cyber-Resilience-NCSC-Notification · Kuwait NCF Respond + Incident Response + Reporting + Recover + BC + Cyber Resilience + NCSC →Cyber resilience is maintained under seven headings: information systems and reporting (at the baseline, protecting integrity and notifying Lloyd's and the LMA of any significant cyber incident or data breach no later than 72 hours after it occurs);
principles-for-doing-business-at-lloyd-s::P12.3 · 12.3 Maintain appropriate cyber resilience →Questions people ask about cyber resilience
What is Cyber Resilience?
Why is Cyber Resilience important for compliance?
What concepts are related to Cyber Resilience?
Which compliance frameworks address Cyber Resilience?
Where can I learn more about Cyber Resilience?
See how Cyber Resilience applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.