  Given the rapid evolution of threats to cyber systems, new management
approaches are needed that address risk across all interdependent domains
(i.e., physical, information, cognitive, and social) of cyber systems. Further,
the traditional approach of hardening of cyber systems against identified
threats has proven to be impossible. Therefore, in the same way that biological
systems develop immunity as a way to respond to infections and other attacks,
so too must cyber systems adapt to ever-changing threats that continue to
attack vital system functions, and to bounce back from the effects of the
attacks. Here, we explain the basic concepts of resilience in the context of
systems, discuss related properties, and make business case of cyber
resilience. We also offer a brief summary of ways to assess cyber resilience of
a system, and approaches to improving cyber resilience.
