Cyber Resilience Definition Nist

The nist publications referenced are the most recent versions of those publications as of the date of this document.

Cyber resilience definition nist. Cyber resilience refers to an entity s ability to continuously deliver the intended outcome despite adverse cyber events. Nist sp 800 160 vol 2 superseded incose14 the ability to prepare for and adapt to changing conditions and withstand and recover rapidly from disruption. The concept essentially brings the areas of information security business continuity and organizational resilience together. It security infrastructures likely use policy based security to defend against attacks or to raise a flag when a threat is detected.

Resilience includes the ability to withstand and recover from deliberate attacks accidents or naturally occurring threats or incidents. October is cybersecurity awareness month and nist is celebrating all month long. Each entry in the glossary points to one or more source nist publications and or cnssi 4009 and or supplemental sources where appropriate. Since draft documents are not stable we do not refer to terms definitions in them.

It maximizes the ability of organizations to complete critical or essential missions or business functions despite an adversary presence in their systems and infrastructure threatening mission critical systems and system components. Check out the cybersecurity framework s critical infrastructure resource page where we added the new version 1 1 manufacturing profile. Comments about specific definitions should be sent to the authors of the linked source publication. Cyber resilience is an evolving perspective that is rapidly gaining recognition.

In simple terms cyber resilience is a measure of how well an enterprise can manage a cyberattack or data breach while continuing to operate its business effectively. For nist publications an email is usually found within the document. The cyber resiliency analysis is intended to determine whether the cyber resiliency properties and behaviors of a system of interest wherever it is in the life cycle are sufficient for the organization using that system to meet its mission assurance business continuity or other security requirements in a threat environment that includes the advanced persistent threat apt. This glossary consists of terms and definitions extracted verbatim from nist s cybersecurity and privacy related federal information processing standards fips nist special publications sps and nist internal interagency reports irs as well as from committee on national security systems cnss instruction cnssi 4009 only terms that are defined in final publications not.