Innovating Cyber Recovery - Key to Cyber Resilience

Cyber resilience has been defined broadly as the ability to anticipate, withstand, and recover from cyber-attacks. Yet the gap between growing numbers of sophisticated cyber-attacks and effective approaches to Recovery continues to widen. Incident Response Playbooks document the steps organizations should take to respond to and recover from an attack. Yet they are typically based on pre-defined, static views of an organization that may be outdated the day they are finished, and in any case, are difficult to execute in the face of determined threat actors. This paper reviews the current state of incident recovery and sets forth seven areas of innovation to improve Recovery from cyber incidents, based on a core capability: Real-Time Adaptive Incident Response. This set of innovations has the potential to enable the organization to break free from reactionary approaches and proactively take steps to limit business impact and execute optimal paths to recovery.