Skip to content

Resilience

What is Resilience?

The ability of an organization, system, or process to withstand disruptions, adapt to changing conditions, and recover quickly to maintain operations.

Business Continuity

Each of these is named in at least one of the same controls as resilience. The number is how many controls name both.

What the standards actually require on resilience

Requirements naming resilience across 6 standards, quoted from the control text.

Entities participate where they can in the public and private sector industry exercises that verify resilience across the financial sector (Treasury's Hamilton Series, FS-ISAC's CAPS, coalition and provider user-group exercises), and can use the Treasury's Fin...

ffiec-it-examination-handbook::BCM-VII.H · VII.H Industry Exercises and Resilience (Business Continuity Management) →
ISO 28002:201131 controls

The resilience management policy is developed and documented to meet this standard and added to the management system policies already in place.

iso-28002-2011::A.2 · A.2 Resilience management policy →

Intermediate control principles for cyber resilience oversight (required, with baseline, of an AI whose inherent risk is medium). A cyber risk appetite statement is approved by the board or a board committee;

hkma-cyber-resilience-assessment-framework-c-raf::1.1.I · 1.1 Cyber resilience oversight: intermediate level →
ISO 2231615 controls

Evaluation gives management information and intelligence on whether resilience strategies and objectives still meet the organization's needs and where they could be improved.

iso-22316::6.1 · 6.1 Evaluating the factors that contribute to resilience: general →

Processes, procedures and technical measures are defined, put in place and assessed so that the datacenter can keep operating without interruption.

cloud-security-alliance-cloud-controls-matrix-ccm-v4-1::DCS-18 · Datacenter Operations Resilience →

The network strategy should be holistic across HV and LV. Best practice pushes the first single point of failure out toward the final circuits as far as practicable for the critical nature of the facility, using alternative power supplies and alternative cable...

nhs-england-htm-06-01-electrical-services-supply-and-distribution-2017-edition::7.1-7.13 · Distribution strategy for resilience and secondary supply provision by risk →

Questions people ask about resilience

What is Resilience?
The ability of an organization, system, or process to withstand disruptions, adapt to changing conditions, and recover quickly to maintain operations.
Why is Resilience important for compliance?
Resilience is a key concept in Business Continuity. Understanding resilience helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Resilience?
Resilience appears in the requirement text of FFIEC IT Examination Handbook, ISO 28002:2011, HKMA Cyber Resilience Assessment Framework (C-RAF), ISO 22316, Cloud Security Alliance Cloud Controls Matrix (CCM) v4.1. Across these standards we have identified 125 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Resilience?
Explore our compliance framework pages to see how resilience applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Resilience applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.