Abstract

Cyber security is commonly defined as the practice of protecting computers, networks, programs and data from unauthorized access or malicious attacks that are aimed for exploitation. Hence, cyber security is focused primary on malicious activities prevention and protection from occurring. Prevention and protection objectives have been usually achieved by applying traditional risk assessment and management procedures. Despite these efforts it has been shown that complete security of IT systems and data is almost impossible to achieve. Namely, by increasing number and type of different cyber threats the cyber incidents are becoming inevitable. Thus, even the strong cyber security is not enough anymore. Because of that organizations need to build the cyber resilience which mainly deals with system respond and recovery after disruptive event occurring. Cyber security combined with cyber resilience opens a new perspective towards better overall security of IT systems.

Highlights

  • Resilience is a pretty old protection concept

  • Based on what is written in this paper the following conclusions may be drawn out: Even the strong cyber security system is not enough anymore

  • Organizations responsible for cyber security cannot protect themselves from every single cyber threat

Read more

Summary

Introduction

Resilience is a pretty old protection concept. Its origin comes from the elder medicine. Resilience concept involves development of long-term plans for identification, absorption and neutralization of disruptive event. It seeks development of procedures which will enable fast recover of the critical infrastructure functionality. The resilience model as established above represents an integrated approach towards overall protection of the critical infrastructure system It suggests that the resilience concept of thinking goes beyond traditional structural elements. It should be noted here that some authors tend to develop somewhat different hierarchical representation of the infrastructure resilience, related to capacities and related indicators. Anticipative capacity Indicators: 1) Probability of failure; 2) Quality of infrastructure; 3) Pre-event functionality; 4) Quality of mitigating features; 5) Quality of disturbance planning; 6) Quality of communication sharing; and 7) Learnability EU-CIRCLE (2018) [3] project deals with the following five capacities and 26 corresponding generic resilience indicators: 1. Anticipative capacity Indicators: 1) Probability of failure; 2) Quality of infrastructure; 3) Pre-event functionality; 4) Quality of mitigating features; 5) Quality of disturbance planning; 6) Quality of communication sharing; and 7) Learnability

Restorative capacity Indicators
Resilience and Risk
Cyber Security
Cyber Resilience
Recover
Conclusions
Full Text
Published version (Free)

Talk to us

Join us for a 30 min session where you can share your feedback and ask us any queries you have

Schedule a call