Organisational cyber resilience: research opportunities

Cyber resilience has emerged as a new discipline to help organisations deal with cyber problems that cannot be addressed by traditional cyber security solutions. This study analysed the scattered literature on organisational aspects of cyber resilience using Linkov et al.'s (2013a) framework for cyber resilience. Three approaches were identified among the studies. This research found that limited investigation into organisational cyber resilience has been undertaken, while organisational aspects of cyber resilience have received less attention when compared to technical topics. The findings challenge the passive assumption of cyber resilience that appears to underlie many of the publications, which followed a cyber security approach. The limited work found, gaps in research subtopics and the underlying assumptions of organisational cyber-resilience, all point to research opportunities for researchers.