Resilience awareness SecAware

As we are seeing right now, resilience is a valuable concept in business and life as a whole. It involves ‘bending not breaking’, in other words making or arranging things such that issues or incidents (such as pandemics) aren’t disastrous or terminal, although damage may be sustained. Resilient things aren’t necessary invulnerable but they are definitely not fragile. In the lingo, their performance degrades gradually or gracefully. Like the Duracell bunny, they just keep going. In relation to information security, resilience is a form of control, a security approach supporting business continuity and information risk management. It is a very broadly applicable control. There are situations where resilience isn’t helpful but they are far outnumbered by those where resilience makes business sense. Examples: • Resilient databases and other software applications are designed to trap and deal appropriately with data or system errors and attacks that might otherwise cause failur...