Cyber Resilience: Management With Cybersecurity Controls

This paper describes a probabilistic method designed to measure an organization's level of resilience to cyber attacks and to provide a quantifiable approach to the risk reduction controls of cybersecurity. Through the Internet of Things, computers run the government, banks, public utilities, and even refrigerators. To protect sensitive data and to avoid costly network disruptions, the owners of these systems try to prevent cyber attackers from infiltrating their devices. Yet, that is not always feasible for reasons ranging from ignorance of cyber security and of their system, and to the lack of funding of technical support. To protect sensitive data and to avoid costly network disruptions, organizations must therefore address the system's resilience and its ability to recover from catastrophic loss.