For years, cyber security aimed to keep attackers out entirely. Experience has taught a humbler lesson: a sufficiently determined attacker will eventually find a way in. Cyber resilience accepts this and shifts the focus to detecting intrusions fast, limiting their spread and recovering quickly.
The resilience mindset
- Assume a breach will happen and plan for it
- Detect intrusions early, before they spread
- Contain damage through segmentation and least privilege
- Recover quickly from secure, tested backups
- Learn from every incident
Why it is more realistic
Pursuing prevention alone leaves an organisation helpless the moment prevention fails. Resilience ensures that a single successful intrusion does not become a catastrophe, because the organisation can detect, contain and recover rather than simply hope it never happens.
Built into design and operation
Resilience is designed in, through architecture, monitoring and tested recovery, and maintained through operation and practice. It is an ongoing capability, not a product, and it applies as much to physical and operational systems as to IT.
Capabilities are shared confidentially, with authorised organisations only.