Cyber-resilience is an organization’s ability to anticipate, withstand, recover from, and adapt to cyberattacks or technical failures while maintaining essential business operations. Unlike traditional cybersecurity, which focuses primarily on preventing breaches (the “walls”), cyber-resilience assumes that some incidents are inevitable and focuses on how quickly a business can “bounce back”. 

In the European Union, this concept is legally enforced through two major frameworks: DORA and NIS2.