Constructing a Proactive Cyber Resilient Culture for Better Business Outcomes

Cyberattacks have the capacity to destroy a company's brand in addition to stealing valuable information and expert-level knowledge. Because of the growing significance of data to businesses, the information technology department can no longer take primary responsibility for protecting the company from malicious attacks. It is necessary to have an all-encompassing cyber resilience strategy that is focused on information management and encompasses responsibilities from across the whole company. The goal of this research was to distinguish cyber resilience from cyber security by drawing attention to the need for a greater alignment with the business and by outlining the roles and responsibilities of key stakeholders within an organisation. The objective was to build an inter-disciplinary, pre-emptive approach with the idea of strengthening the company's cyber resilience. The research analysed corporate cyber resilience and highlighted best practises for creating a more robust and efficient plan. The research identified the key stakeholders, as well as their responsibilities in the implementation and maintenance of the plan, and the tools and framework that were required to support it. In addition to this, the research investigated the difficulties that businesses encounter when attempting to establish and maintain an effective cyber resilience plan, and it provided advice for overcoming these difficulties. The research found that every board of directors and executives must prioritise cyber risk management and put it on their agendas at a high level to increase cyber resilience and incident.