Testing and Improving Cyber Resilience

It is necessary to check controls and rehearse response procedures to ensure that system designs and controls for resilience work as intended and are effective. Thus, in this chapter, we discuss the most critical aspects of cyber resilience testing like (i) auditing, where particular focus is put on audit plans, (ii) exercising, with a special focus on how to conduct cyber tabletop exercises, (iii) testing, focusing on the different forms of test and their differences, and (iv) training. Furthermore, the chapter deals with the involvement of cyber-physical systems in resilience planning and countermeasure application, as the special requirements in these systems make them deviate from standard practices a lot.