Resilience in the Context of Cyber Security: A Review of the Fundamental Concepts and Relevance
Source abstract
Abstract
Cyber resilience is a topic of extreme relevance to organizations in the most diverse segments of activity, where the concept of resilience presents nuance in its different dimensions, in addition to the need to recognize and distinguish the different stages that characterize the state of cyber resilience. Thus, the aim of this article is to understand the various concepts of cyber resilience in its different contexts and dimensions. To this end, bibliographic research was carried out through the process of indirect documentation in articles, books, and publications on the subject. The main stages of resilience were mapped, and an analysis was produced of how these stages have evolved over the years. Finally, an updated proposal for standing for the stages of cyber resilience was presented, based on the consolidation of proposals from the entire framework studied in this work. This review emphasizes the importance of cyber resilience and understanding the stages that characterize cyber resilience, highlighting the need for its further integration into the organizations in the most diverse segments of activity management.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Supply Chain Resilience and Risk Management · Information and Cyber Security · Network Security and Intrusion Detection
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
General Coordination of Information Technology Management, Oswaldo Cruz Foundation-Fiocruz, Rio de Janeiro 21040-900, Brazil
Post-Graduate Program in Industrial Management and Technology, University Center SENAI CIMATEC, Salvador 41650-010, Brazil
SENAI Institute of Innovation (ISI) in Health Advanced Systems (CIMATEC ISI SAS), SENAI CIMATEC, Salvador 41650-010, Brazil
References (79)
Show source-provided references
1. Evaluation of Operational Resilience in Cyber-Physical Production Systems: Literature Review
2. Cyber Resilience: A Global Challenge10.1016/j.techfore.2022.122013 ↗
3. Annarelli, A., and Palombi, G. (2021). Digitalization Capabilities for Sustainable Cyber Resilience: A Conceptual Framework. Sustainability, 13.10.3390/su132313065 ↗
4. Saeed, S., Altamimi, S.A., Alkayyal, N.A., Alshehri, E., and Alabbad, D.A. (2023). Digital Transformation and Cybersecurity Challenges for Businesses Resilience: Issues and Recommendations. Sensors, 23.10.3390/s23156666 ↗
5. Bagheri, S., Ridley, G., and Williams, B. (2023). Organisational Cyber Resilience: Management Perspectives. Australas. J. Inf. Syst., 27.10.3127/ajis.v27i0.4183 ↗
6. ENISA (2023). ENISA Threat Landscape 2023, ENISA.
7. A Systematic Review of Cyber-Resilience Assessment Frameworks10.1016/j.cose.2020.101996 ↗
8. An Approach to Minimizing Legal and Reputational Risk in Red Team Hacking Exercises10.1016/j.clsr.2018.05.033 ↗
9. Timmers, P. (2022). Cybersecurity and Resilience from a Strategic Autonomy Perspective, European Liberal Forum. [1st ed.].
10. Building a Cybersecurity Culture of Public Administration System in Poland10.1016/j.procs.2022.09.180 ↗
11. Calculated Risk? A Cybersecurity Evaluation Tool for SMEs10.1016/j.bushor.2020.03.010 ↗
12. Resilient Control Based Frequency Regulation Scheme of Isolated Microgrids Considering Cyber Attack and Parameter Uncertainties10.1016/j.apenergy.2021.118054 ↗
13. Safitra, M.F., Lubis, M., and Fakhrurroja, H. (2023). Counterattacking Cyber Threats: A Framework for the Future of Cybersecurity. Sustainability, 15.10.3390/su151813369 ↗
14. Walden, D.D., Roedler, G.J., Forsberg, K., Hamelin, R.D., Shortell, T.M., and International Council on Systems Engineering (2015). Systems Engineering Handbook: A Guide for System Life Cycle Processes and Activities, Wiley. [4th ed.].
15. NIST (2010). Contingency Planning Guide for Federal Information Systems.
16. The White House Office of the P.S. (2022, March 13). Presidential Policy Directive—Critical Infrastructure Security and Resilience, Available online: https://obamawhitehouse.archives.gov/the-press-office/2013/02/12/presidential-policy-directive-critical-infrastructure-security-and-resil.
17. DHS (2008). DHS Risk Lexicon.
18. Hollnagel, E., Pariès, J., Woods, D.D., and Wreathall, J. (2011). Resilience Engineering in Practice: A Guidebook, Ashgate. Ashgate studies in resilience engineering.
19. (2017). Security and Resilience—Organizational Resilience—Principles and Attributes (Standard No. ISO 22316:2017(En)). Available online: https://www.iso.org/obp/ui#iso:std:iso:22316:ed-1:v1:en.
20. Does Applying a Circular Business Model Lead to Organizational Resilience? Mediating Effects of Industry 4.0 and Customers Integration10.1016/j.techfore.2023.122672 ↗
21. Seville, E. (2017). Resilient Organizations: How to Survive, Thrive and Create Opportunities through Crisis and Change, Kogan Page Limited.
22. The Relationship between Slack Resources and Organizational Resilience: The Moderating Role of Dual Learning10.1016/j.heliyon.2023.e14044 ↗
23. Social Media Use, Corporate Entrepreneurship and Organizational Resilience: A Recipe for SMEs Success in a Post-Covid Scenario10.1016/j.techfore.2023.122421 ↗
24. How Can New-Energy Vehicle Companies Use Organizational Resilience to Build Business Ecological Advantages? The Role of Ecological Niche and Resource Orchestration10.1016/j.jclepro.2023.137765 ↗
25. (2022, November 20). Gartner Definition of Operational Resilience—Gartner Information Technology Glossary. Available online: https://www.gartner.com/en/information-technology/glossary/operational-resilience.
26. SEI (2021, August 22). CERT Resilience Management Model (CERT-RMM) Version 1.2. Available online: https://resources.sei.cmu.edu/library/asset-view.cfm?assetid=508084.
27. Understanding the Management of Cyber Resilient Systems10.1016/j.cie.2020.106829 ↗
28. McFarlane, D., Srinivasan, R., Puchkova, A., Thorne, A., and Brintrup, A. (2018). Service Orientation in Holonic and Multi-Agent Manufacturing, Springer.
29. (2021, October 05). Brasil Glossário de Segurança da Informação, Available online: https://www.in.gov.br/en/web/dou/-/portaria-n-93-de-26-de-setembro-de-2019-219115663.
30. NIST (2021). Developing Cyber-Resilient Systems: A Systems Security Engineering Approach.
31. WEF (2012). Partnering for Cyber Resilience: Risk and Responsibility in a Hyper Connected World—Principles and Guidelines, WEF.
32. Rocha, A., Correia, A.M., Costanzo, S., and Reis, L.P. (2015). New Contributions in Information Systems and Technologies, Springer International Publishing.10.1007/978-3-319-16528-8 ↗
33. Haque, M.A., Shetty, S., and Krishnappa, B. (2019, January 27–29). ICS-CRAT: A Cyber Resilience Assessment Tool for Industrial Control Systems. Proceedings of the 2019 IEEE 5th Intl Conference on Big Data Security on Cloud (BigDataSecurity), IEEE Intl Conference on High Performance and Smart Computing, (HPSC) and IEEE Intl Conference on Intelligent Data and Security (IDS), Washington, DC, USA.10.1109/BigDataSecurity-HPSC-IDS.2019.00058 ↗
34. Designing Framework for Tabletop Exercise to Promote Resilience Against Cyber Attacks10.1016/B978-0-323-85159-6.50245-1 ↗
35. Actual TDoA-Based Augmentation System for Enhancing Cybersecurity in ADS-B10.1016/j.cja.2020.05.026 ↗
36. Exploiting the MIL-STD-1553 Avionic Data Bus with an Active Cyber Device10.1016/j.cose.2020.102097 ↗
37. Towards Industrial Cybersecurity Resilience of Multinational Corporations
38. Modelling Cyber Resilience in a Water Treatment and Distribution System10.1016/j.ress.2022.108653 ↗
39. Cyber-Resilience of Critical Cyber Infrastructures: Integrating Digital Twins in the Electric Power Ecosystem10.1016/j.cose.2021.102507 ↗
40. Enhancing the Cyber Resilience of Critical Infrastructures through an Evaluation Methodology Based on Assurance Cases10.1016/j.procs.2018.08.099 ↗
41. Zohuri, B., and McDaniel, P. (2021). Introduction to Energy Essentials, Academic Press.
42. Cyber Resilience Models of Systems for Monitoring and Operational Dispatch Control of Electric Power Systems
43. Cybersecurity and Resilience in the Swiss Electricity Sector: Status and Policy Options10.1016/j.jup.2022.101432 ↗
44. Security Risk Assessment for SDN-Enabled Smart Grids10.1016/j.comcom.2018.10.007 ↗
45. Using Modified Prediction Interval-Based Machine Learning Model to Mitigate Data Attack in Microgrid10.1016/j.ijepes.2021.106847 ↗
46. Cyber Risk and Insurance for Transportation Infrastructure10.1016/j.tranpol.2019.04.019 ↗
47. Disruptive Acts in Cyberspace, Steps to Improve Cyber Resilience at National Level10.1016/j.trpro.2019.07.220 ↗
48. Cyber-Resilience for Marine Navigation by Information Fusion and Change Detection10.1016/j.oceaneng.2022.112605 ↗
49. Cyber Resilience Protection for Industrial Internet of Things: A Software-Defined Networking Approach10.1016/j.compind.2018.10.004 ↗
50. Discussing Resilience in the Context of Cyber Physical Systems10.1016/j.cie.2021.107534 ↗
51. Obtaining High Preventive and Resilience Capacities in Critical Infrastructure by Industrial Automation Cells10.1016/j.ijcip.2020.100355 ↗
52. Cyber Resilience in Firms, Organizations and Societies10.1016/j.iot.2020.100204 ↗
53. Through-Life Cyber Resilience in Future Smart Manufacturing Environments. A Research Programme10.1016/j.promfg.2018.10.157 ↗
54. ENISA (2021). ENISA Threat Landscape for Supply Chain Attacks, ENISA.
55. The Role of Cybersecurity and Policy Awareness in Shifting Employee Compliance Attitudes: Building Supply Chain Capabilities10.1016/j.ijinfomgt.2022.102520 ↗
56. Assessing Cyber Resilience of Additive Manufacturing Supply Chain Leveraging Data Fusion Technique: A Model to Generate Cyber Resilience Index of a Supply Chain10.1016/j.cirpj.2021.09.008 ↗
57. Are We Ready for Cyberterrorist Attacks?—Examining the Role of Individual Resilience10.1016/j.im.2018.04.008 ↗
58. Cybersecurity through the Lens of Digital Identity and Data Protection: Issues and Trends10.1016/j.techsoc.2021.101734 ↗
59. The Cyber-Resilience of Financial Institutions: Significance and Applicability10.1093/cybsec/tyz013 ↗
60. Muddling through Cybersecurity: Insights from the U.S. Healthcare Industry10.1016/j.bushor.2019.03.010 ↗
61. Nwaiwu, F., and Mbelu, S. (2020). Digital Transformation in Healthcare and Surveillance Capitalism: Comparative Assessment of Data and Privacy Protection Compliance across the European Union. SSRN J., 3.10.2139/ssrn.3643838 ↗
62. The Regulatory Framework for the Protection of Critical Infrastructures against Cyberthreats: Identifying Shortcomings and Addressing Future Challenges: The Case of the Health Sector in Particular10.1016/j.clsr.2020.105502 ↗
63. Carías, J.F., Arrizabalaga, S., Labaka, L., and Hernantes, J. (2020). Cyber Resilience Progression Model. Appl. Sci., 10.10.3390/app10217393 ↗
64. Cyber Resilience Recovery Model to Combat Zero-Day Malware Attacks10.1016/j.cose.2016.05.001 ↗
65. Vogel, E., Dyka, Z., Klann, D., and Langendörfer, P. (2021). Resilience in the Cyberworld: Definitions, Features and Models. Future Internet, 13.10.3390/fi13110293 ↗
66. Alberts, C., Wood, C., and Dorofee, A. (2014). Introduction to the Security Engineering Risk Analysis (SERA) Framework, Software Engineering Institute.
67. Cyber-Physical Resilience Modelling and Assessment of Urban Roadway System Interrupted by Rainfall10.1016/j.ress.2020.107095 ↗
68. Cyber Resilience of Autonomous Mobility Systems: Cyber-Attacks and Resilience-Enhancing Strategies10.1007/s12198-021-00230-w ↗
69. Bai, T., Luo, J., Zhao, J., Wen, B., and Wang, Q. (2021, January 19–26). Recent Advances in Adversarial Training for Adversarial Robustness. Proceedings of the Thirtieth International Joint Conference on Artificial Intelligence Survey Track, Montreal, QC, Canada.10.24963/ijcai.2021/591 ↗
70. Athalye, A., and Carlini, N. (2018). On the Robustness of the CVPR 2018 White-Box Adversarial Example Defenses. arXiv.
71. Zhao, W., Alwidian, S., and Mahmoud, Q.H. (2022). Adversarial Training Methods for Deep Learning: A Systematic Review. Algorithms, 15.10.3390/a15080283 ↗
72. Resilience Enhancement of Multi-Agent Reinforcement Learning-Based Demand Response against Adversarial Attacks10.1016/j.apenergy.2022.119688 ↗
73. Ghelani, D. (2022). Cyber Security, Cyber Threats, Implications and Future Perspectives: A Review. Authorea.10.22541/au.166385207.73483369/v1 ↗
74. Cybersecurity Capabilities for Critical Infrastructure Resilience10.1108/ICS-06-2021-0091 ↗
75. Decentralizing Cyber Physical Systems for Resilience: An Innovative Case Study from A Cybersecurity Perspective10.1016/j.cose.2022.102953 ↗
76. On the Resilience of Modern Power Systems: A Comprehensive Review from the Cyber-Physical Perspective10.1016/j.rser.2021.111642 ↗
77. Stakeholder Perspectives and Requirements on Cybersecurity in Europe
78. Resilience in Healthcare Systems: Cyber Security and Digital Transformation
79. Trim, P.R.J., and Lee, Y.-I. (2023). Managing Cybersecurity Threats and Increasing Organizational Resilience. Big Data Cogn. Comput., 7.10.3390/books978-3-0365-9645-7 ↗