Enterprise Transformation to Cyberresiliency

The presentation articulates the needs of the enterprise to transition from “cybersecurity” to “cyberresiliency”. Cyberresilience refers to the ability to constantly deliver intended outcomes despite negative cyber events. It is keeping business intact through the ability to effectively restore normal operations in the areas of information systems, business functions and supply chain management. In simple terms, it is the return to a normal state. Cyberresiliency is the extrapolation of cybersecurity, and it has progressed to enable enterprises to withstand and rapidly recover from cyber-attacks with criminal intent to induce harm, cripple and extort enterprises. Cyberresiliency is a board-level responsibility with high business content. It is based on initiatives under the auspices of corporate governance, enterprise cyber programs and supply chain network. In addition, the presentation describes a business-oriented model as how to an enterprise may develop a framework of a cyberresiliency decision model (CRDM). The proposed business model quantifies and compares the degree of impact of each proposed cyberresiliency initiative on any of the enterprise-stated goals and objectives and develops a prioritized road map to the containment of the cyber threats. Determining the portfolio of cyberresiliency investment and the realized value of such initiatives is highly correlated to an organization’s willingness to articulate the following - The risk of potential costs of security incidents that the enterprise is willing to bear - The level of risk that the enterprise is willing to accept when running its business - The enterprise’s recognition that investment in cyberresiliency ought to be mapped and prioritized to the desired outcome and types of threats