Skip to content

Resilience

What is Resilience?

The ability of an organization, system, or process to withstand disruptions, adapt to changing conditions, and recover quickly to maintain operations.

Business Continuity

Terms that appear alongside resilience

Each of these is named in at least one of the same controls as resilience. The number is how many controls name both.

Frameworks that govern resilience

NIST Cybersecurity Framework 2.0View framework →ISO 27001:2022View framework →

What the standards actually require on resilience

Requirements naming resilience across 6 standards, quoted from the control text.

BS 65000:2014 - Guidance on Organizational Resilience22 controls

Integrate resilience into strategic planning, investment decisions, and major change programmes.

BS65000-8.1 · Strategic Resilience →
ASIS SPC.1-2009 - Organizational Resilience Standard13 controls

Top management establishes a documented resilience policy appropriate to the organization's risk environment.

SPC1-4.2 · Resilience Policy →
ISO 2231611 controls

Business continuity policy. Control from ISO 22316 framework, domain: ISO 22316: BCM Program Management.

ISO22316-01 · Organizational resilience and security - business continuity policy for building security and resilience →
HKMA SPM6 controls

HKMA SPM Operational Risk + Resilience + Recovery + Outsourcing modules. OR OPERATIONAL RISK MANAGEMENT: (1) OR-1 Operational Risk Management - sound operational risk governance + risk identification + assessment + mitigation + monitoring + reporting + RCSA +...

HKMA-SPM-OR-RR-SA-OperationalResilience · HKMA SPM Operational Risk (OR-1), Operational Resilience (OR-2), Recovery Planning (RR-1), Outsourcing (SA-2) →
HKMA Cyber Resilience Assessment Framework (C-RAF)5 controls

HKMA C-RAF coordination with HKMA SPM Modules + international banking sectoral cybersecurity + 2024-2025 pipeline. HKMA SUPERVISORY POLICY MANUAL (SPM) MODULES: (a) TM-G-1 General Principles for Technology Risk Management (verified separately) - foundational t...

HKMA-CRAF-Coord-SPM-TM-G-1-Singapore-UK-Sectoral · HKMA C-RAF Coordination with HKMA SPM TM-G-1, Singapore MAS TRMG, UK FCA Operational Resilience and Sectoral Cybersecurity →
IACS Unified Requirements E26/E27 - Cyber Resilience of Ships and On-Board Systems5 controls

UR E26 Goal 1 (Identify) also requires a Ship Cyber Resilience Plan (SCRP) covering scope + assumptions + roles + responsibilities + risk assessment methodology + control measures + maintenance procedures + incident response + recovery + training.

IACS-UR-E26-Identify-Plan-Risk-Survey-Documentation · IACS UR E26 Identify Goal - Ship Cyber Resilience Plan + CBS Risk Assessment + Survey + Documentation →

Questions people ask about resilience

What is Resilience?
The ability of an organization, system, or process to withstand disruptions, adapt to changing conditions, and recover quickly to maintain operations.
Why is Resilience important for compliance?
Resilience is a key concept in Business Continuity. Understanding resilience helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Resilience?
Resilience appears in the requirement text of BS 65000:2014 - Guidance on Organizational Resilience, ASIS SPC.1-2009 - Organizational Resilience Standard, ISO 22316, HKMA SPM, HKMA Cyber Resilience Assessment Framework (C-RAF). Across these standards we have identified 62 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Resilience?
Explore our compliance framework pages to see how resilience applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Resilience applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.