Digital Resilience Is A Step Up From Cybersecurity

For many years those working in cybersecurity fought hard to elevate the issue beyond the realms of the IT department and into the boardroom. Recent evidence suggests that the message is finally starting to get through. According to a study by US consultants McKinsey, 75 percent of executives said they considered cybersecurity to be a top priority.

Another survey by UK consultants KPMG revealed that cybersecurity was very much on the agenda in UK boardrooms, with 74 percent of UK business leaders agreeing that cybersecurity was an enabler of trust, and 45 percent believing cybersecurity specialists were an effective part of the business.

Now, however, we are gearing up for the next battle, to convince organisations of the importance of digital resilience.

Resilience is one of the most valuable long-term properties of an organisation, defining its ability to grow and survive in a changing environment by successfully implementing evolving strategies.

As crises are often driven by events that are beyond their control, resilient organisations are those that are best prepared to face and adapt to the challenges ahead.

As the Internet of things becomes a reality and the adoption of connected devices continues apace, it’s clear we are heading towards a future in which we will all be dependent on digital technology. Despite many organisations adopting “digital first” or even “digital only” strategies, few have grasped how dependent their core business processes are on digital technology. In the event of disruption or failure, switching to processes that are less dependent on technology are often no longer possible.

Digital resilience therefore represents a fundamental change in the way we understand digital technology, risk and opportunity.

As a concept it is much talked about but ill-defined, so the first step is to agree a simple and concise definition of what it actually means in a business context. I propose the following:

Digital Resilience, an organisation’s ability to maintain, change or recover technology-dependent operational capability.
In a constantly evolving digital environment, organisations must be able to move quickly and seamlessly to adopt new digital technology solutions and then to recover, rebound and move forward if things go wrong.

Many commentators talk about digital resilience only in terms of cybersecurity, like this recent McKinsey blog, which says organisations are working towards a situation in which they design their business processes and IT systems to “facilitate the protection of critical information and to implement strong cyber defenses and effective plans for responding to cyberattacks.”

That is true, but digital resilience should be seen much more widely than just through a narrow cybersecurity focus.

The digital resilience banner encompasses several other important business concepts including change management, business resilience, operational risk and even competitiveness, as recently alluded to in this excellent white paper on Digital Resilience published by the Shearwater Group and the Institute for Strategy, Resilience & Security.

Digital resilience is the very foundation of the modern business and should be recognised as the most valuable long-term property of an organisation, something to be managed at senior level but understood by everyone at all levels. If operational resilience and business competitiveness go hand-in-hand, then digital resilience is paramount to achieving both of those.

Being digitally resilient means an organisation is well-placed to adopt new systems and processes, ensuring continued competitiveness and business survival.

It means assessing new technologies in terms of their impact on overall business resilience. More secure may not necessarily mean more resilient; if a solution introduces processes that are flawed or causes business inflexibility then this may affect competitiveness.

Any new digital infrastructure must therefore be assessed in terms of its overall impact on business resilience, both in terms of opportunity and risk.

The more tightly coupled and efficient that digital processes are during normal operation, the more disruption poses a threat to operational, digital and therefore business resilience.

People, technologies and processes represent a complex operational environment where failure of any one component part can cause a cascading effect that has the potential to render core processes inoperable.

Identifying each component part and their risk and evolutionary attributes will support competitiveness and both digital and business resilience.

Digital resilience also requires a fundamental shift in how organisations manage risk and opportunity, traditional models of risk mitigation and impact analysis are no longer sufficient.

It must be assessed in terms of combinations of long-tail effects and an organisation’s ability to anticipate, respond, learn and evolve appropriately to shifts in a hyper-networked digital environment.

Digital resilience thinking ensures that the entire organisation is considered and challenged in the light of enabling and balancing growth, evolutionary change and security needs appropriately.

CSO Online

You Might Also Read: 

Get Your Data Strategy On Board:

Strategies For A Cyber Security Culture (£):

 

 

« Alaska Dusts Off Its Typewriters
SamSam: $6 million Ransomware »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Resecurity, Inc.

Resecurity, Inc.

Resecurity is a cybersecurity company that delivers a unified platform for endpoint protection, risk management, and cyber threat intelligence.

ZenGRC

ZenGRC

ZenGRC - the first, easy-to-use, enterprise-grade information security solution for compliance and risk management - offers businesses efficient control tracking, testing, and enforcement.

NordLayer

NordLayer

NordLayer is an adaptive network access security solution for modern businesses — from the world’s most trusted cybersecurity brand, Nord Security. 

Jooble

Jooble

Jooble is a job search aggregator operating in 71 countries worldwide. We simplify the job search process by displaying active job ads from major job boards and career sites across the internet.

XYPRO Technology

XYPRO Technology

XYPRO is the market leader in HPE Non-Stop Security, Risk Management and Compliance.

Bishop Fox

Bishop Fox

Bishop Fox is a leading authority in offensive security, providing solutions ranging from continuous penetration testing and attack surface management to product and application security assessments.

CloudSigma

CloudSigma

CloudSigma, a pure-cloud IaaS provider offers flexible and innovative cloud hosting solutions for companies of all sizes both in Europe and the US.

Usenix

Usenix

Usenix brings together the community of engineers, system administrators, scientists, and technicians working on the cutting edge of computing.

Ikerlan

Ikerlan

Ikerlan is an R&D technology centre specialising in areas including embedded systems, industrial automation and industrial cybersecurity.

Thinkst Applied Research

Thinkst Applied Research

Thinkst is an Applied Research company with a deep focus on information security.

Global Cyber Alliance (GCA)

Global Cyber Alliance (GCA)

Global Cyber Alliance is an international, cross-sector effort dedicated to eradicating cyber risk and improving our connected world.

Blockchains LLC

Blockchains LLC

Blockchains is committed to changing the world for the better. Using blockchain and other innovative technologies, we’ll build new systems, new security, and new interactions.

Noventiq

Noventiq

Noventiq (the brandname of Softline Holding plc) is a leading global solutions and services provider in digital transformation and cybersecurity.

Ermetic

Ermetic

Ermetic’s identity-first cloud infrastructure security platform provides holistic, multi-cloud protection in an easy-to-deploy SaaS solution.

Searchlight Cyber

Searchlight Cyber

Searchlight Cyber is a leading darknet intelligence company. Working with law enforcement, industry, and end users to help protect society against the threats of the darknet.

Trisul Network Analytics

Trisul Network Analytics

Trisul helps organizations deploy full spectrum deep network monitoring which can serve as a single source of truth for performance monitoring, security analytics, threat detection and compliance.

Advantage

Advantage

Advantage exists to provide peace of mind in an evolving technology reliant world. We were created by visionaries who for nearly 4-decades have been passionate about providing world-class solutions.

CybersCool Defcon

CybersCool Defcon

CybersCool is committed to educate and train, re-skill and up-skill the current workforce of various industries and businesses in the knowledge and know-how of cybersecurity.

Levio

Levio

Levio is a digital native business and technology consulting firm. As a true partner from start to finish, our goal is a long-lasting transformation that’s right for your business model.

Sprocket Security

Sprocket Security

Sprocket Security protects your business by monitoring the cybersecurity landscape and performing continuous penetration testing services.

Viatel Technology Group

Viatel Technology Group

Viatel Technology Group is a complete digital services provider. We have over 26 years’ experience delivering fully managed security, networking, cloud and communications services.