What is cyber resilience, and why does it require good security incident management?

Cyber resilience is an organisation's ability to prepare for, withstand and quickly recover from cyberattacks so critical business operations continue despite adverse events.

Because a breach is assumed to be inevitable, resilience — not perfect prevention — becomes the strategic goal. Resilience needs both proactive measures (taken in advance to prevent incidents, or at least to detect them quickly if prevention fails) and reactive measures (taken after an incident to respond appropriately to detected events). Effective incident management processes are how an organisation actually delivers the "withstand and recover" part. Put bluntly: good incident management can be just as important to a company's security as everything else combined.

Go deeper:

• Cyber resilience (Wikipedia) — resilience as continuing to deliver the intended outcome despite attacks, and how it relates to cyber security and critical infrastructure.