Cyber Resilience Fundamentals

This book provides readers with the necessary capabilities to meet the challenge of building and testing resilient IT services. Upon introducing the fundamentals of cyber resilience with important international standards and best practices, and the risk management process, the book covers in detail the cyber resilience management process. Here, it gives insights into the principles and design criteria to build cyber resilience in organizations, and to integrate it into operations to contribute to incident preparedness. Further, it describes measures for incident handling, including detection, containment, and post-incident handling, and analyses the most critical aspects of cyber resilience testing, such as auditing, exercising, and testing. Written for advanced undergraduate students attending information security and business continuity management courses, this book also addresses researchers and professionals in the broad field of IT Security and cyber resilience.

Simon Tjoa serves as the Head of the Department of Computer Science and Security at the St. Pölten University of Applied Sciences, Austria. His main research focus is on information security management, cyber resilience and security of artificial intelligence. He is working group leader for sustainability and computing at the Austrian Computer Society and an expert of the Austrian Standards Working Group “Information security, Cybersecurity and Privacy Protection”.

Melisa Gafić is an Information Security Manager and Lecturer at the St. Pölten University of Applied Sciences, Austria. Her teaching interests focus on information security management, business continuity management and cyber resilience.

Peter Kieseberg is Chapter Chair of IEEE Systems, Man, and Cybernetics Society (IEEE SMC) Austria and serves in various other officer positions in international associations. His research interests focus on Security in data driven environments, covering aspects of digital forensics, securing AI systems, as well as building resilient data driven application.