Building Your Roadmap to Cyber Resilience – Five Things You Can Do Today
summary
A practical roadmap maps seven concrete steps: governance and budget authority through a cyber resilience executive, sustain the program, inventory the ecosystem (6,500 tier‑one suppliers seen at a bank), define minimum acceptable service levels, create service delivery options, preserve critical data (immutable backups) and run independent recovery tests. The Colonial Pipeline case study shows contagion risk; industry metrics show two‑thirds of breaches go undetected and mean time to detect ~9 months, ransomware often infects 22 other machines. Use maturity models, BIAs, awareness training and regular independent exercises.
AI-written summary · about
chapters (13)
- 0:00Cyber resilience challenges
- 4:47Operational resilience principles
- 10:36Detection biggest weakness
- 16:02Contagion in systems
- 18:52Rugby metaphor
- 21:21Seven-step roadmap
- 25:44Framework and ecosystem
- 27:31Colonial Pipeline case
- 31:04Governance mapping
- 35:42Minimum viable service levels
- 37:29Maturity models
- 38:16Regulatory landscape
- 40:02Q&A zero trust
related talks
40mCyber Resilience: Say What?
50mBuilding Cyber Resilience - Considerations for CISOs
31mResilience Strategies for Cybersecurity in Government
43mCyber Resilience Starts Within: A Mental Health Perspective
28mHow to Tell the Right Cyber-Story to Executives and Board Members
40mThe Resilience Business Case: Three Case Studies
26mCyber Resilience: Understanding Supply Chain Risks
40mCyber Risk Management Programs: Bringing Clarity to Cybersecurity