Skip to content

Cyber Resilince

Cyber resilience is the ability of any organisation to continuously deliver the intended outcomes despite adverse cyber events. Assuming that attacks will eventually penetrate defenses, focusing heavily on survival and recovery. Protection and security assume defenses can hold, while resilience assumes defenses will fail. A. An effective action that I would do to build cyber resilience is to implement regular, automated, and immutable data backups. (Immutable backups are critical because they cannot be altered, deleted, or encrypted by ransomware after they are written.) B. The biggest obstacle to building cyber resilience is a culture that treats cyber risk exclusively as an IT problem rather than a business crisis. When executives view cyber strategy as a technical checklist, they fail to fund or practice operational survival. C. Cyber resilience is an effective response to human-centric vulnerabilities because it assumes employees will eventually make mistakes and builds systems to survive those errors.

To help the organization stay cyber secure, we should focus on driving habitual, daily actions rather than just general awareness that includes:

  1. Secure and Isolate Credentials Use a password manager by generating, storing, and auto-filling strong, unique passwords for every single corporate account instead of reusing passwords or writing them down.
  2. Maintain Digital Hygiene Lock and log off: Lock the screen every single time we step away from the workstation, even for a moment. Apply updates promptly: Restart the computer and software applications as soon as IT pushes security updates, rather than repeatedly clicking “Remind me later.”
  3. Pause and Verify Identity Verify unusual requests by checking the identity of any colleague, executive, or vendor who requests urgent fund transfers, password resets, or sensitive data access. Use out-of-band communication; confirm the request via a separate, known channel (like a quick phone call or in-person check) instead of replying directly to the suspicious email, text, or chat.