{"id":85418,"date":"2025-12-24T07:32:30","date_gmt":"2025-12-24T07:32:30","guid":{"rendered":"https:\/\/www.eccouncil.org\/cybersecurity-exchange\/?p=85418"},"modified":"2026-06-16T08:49:31","modified_gmt":"2026-06-16T08:49:31","slug":"cyber-resilience-its-not-what-you-think","status":"publish","type":"post","link":"https:\/\/www.eccouncil.org\/cybersecurity-exchange\/cyber-talks\/cyber-resilience-its-not-what-you-think\/","title":{"rendered":"Cyber Resilience: It’s Not What You Think"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Date:<\/strong> J<\/span>u<\/span>ly 7<\/span>, 202<\/span>6<\/span><\/p>

Time:<\/strong> 9<\/span>:30 AM E<\/span>D<\/span>T |\u00a0<\/span>8<\/span>:30\u00a0<\/span>A<\/span>M C<\/span>D<\/span>T | 7:00 PM IST<\/span><\/p>

Topic:<\/strong> Cyber Resilience:\u00a0<\/span>It’s<\/span>\u00a0Not What You Think<\/span><\/p>

Register Now<\/a><\/p>

Abstract:<\/strong><\/p>

While the US and critical infrastructure have been talking about “cyber resilience\u201d for over a decade, more recent efforts focusing on secure by design and the EU’s new Cyber Resilience Act (CRA) have brought the resilience conversation front-and-center\u2014especially when it comes to supporting digital transformation.<\/span>\u00a0<\/span><\/p>

The message is clear: cyber resilience\u00a0isn\u2019t\u00a0just an IT or security issue.\u00a0It\u2019s\u00a0a critical business function, and the guidance \u2013\u202flike NIST\u2019s four principles of Anticipate, Withstand, Recover and Adapt \u2013 would seem to\u00a0indicate\u00a0that\u00a0we’ve\u00a0finally moved from deterrence and prevention to something a bit more proactive.<\/span>\u00a0<\/span><\/p>

But have we?<\/span>\u00a0<\/span><\/p>

Because if you read what they really\u00a0say\u00a0and you look at\u00a0what\u2019s\u00a0really happening in practice,\u00a0it\u2019s\u00a0still all about uptime, continuity,\u00a0availability\u00a0and recovery of the infrastructure. Sure,\u00a0it\u2019s\u00a0supposed to\u00a0maintain\u00a0all that after a breach or incident, but wasn\u2019t that always the requirement all along?<\/span>\u00a0<\/span><\/p>

The goal of digital transformation is to enable our organizations to continually adapt and change so new opportunities, new ways of\u00a0working\u00a0and\u00a0new technologies\u00a0can be adopted.\u00a0And yet, everything we do in security \u2013 at the most fundamental level \u2013 is about preventing change or reverting back to a last known good state.\u00a0The reality of digital transformation means that \u201clast known good\u201d\u00a0isn’t\u00a0good enough anymore because that state no longer exists.<\/span>\u00a0<\/span><\/p>

If we want to achieve true cyber resilience \u2013 the kind the CRA is talking about \u2013 then we need\u00a0stop\u00a0focusing only on the resilience of the infrastructure. We must instead address where everything cyber fully intersects with how the rest of\u00a0business\u00a0gets done. Right now, we\u00a0don\u2019t. Security is still an afterthought. \u201cSecure by Design\u201d is still often a checklist. And far too often is a catastrophic incident or\u00a0outage\u00a0the only thing that shows us\u00a0what\u2019s\u00a0really important.<\/span>\u00a0<\/span><\/p>

In this talk,\u00a0you\u2019ll\u00a0learn things you can start doing today to move towards true cyber resilience in your own organization, including:<\/span><\/p>

Key Takeaways:<\/strong><\/p>