Hacking Humans
resiliency (noun) [Word Notes]
· Summarized
Key takeaways
- Cyber resilience is about the ability to continue delivering essential services despite cyber attacks, not just about preventing breaches.
- Modern cybersecurity strategies should embed resilience tactics across all layers—identity, protection, detection, response, and recovery.
- Assuming breaches will occur helps in designing more effective resilient systems that can adapt, recover, and continue functioning.
- Understanding the evolution of the concept of resilience underscores its importance in creating robust cybersecurity defenses.
- Using cultural references like 'Terminator' illustrates the difference between merely surviving an attack and being resilient by adapting and recovering.
Summary
Understanding Cyber Resilience
This section explores the concept of cyber resilience, emphasizing its importance as the ability of systems and organizations to withstand and recover from cyber attacks while continuing to deliver essential services. It traces the evolution of the term from various sources including government and international standards, highlighting that cyber resilience is not merely about prevention, but about assuming breaches will happen and preparing to operate under adverse conditions. The historical context is provided, referencing definitions from the US Department of Homeland Security, ISO, and NIST, with a focus on the ability to adapt and recover rather than just defend.
Resilience Versus Survivability
The discussion compares resilience with survivability through the lens of the Terminator movies, illustrating the difference with Arnold Schwarzenegger's 'surviving' versus Robert Patrick's 'resilient' Terminator. Resilient systems can recover, adapt, and continue functioning after damage or attack, embodying flexibility and forward-looking strategies in cybersecurity.
The Importance of Adapting Security Strategies
The episode underscores that modern cybersecurity must incorporate resilience tactics into identification, protection, detection, response, and recovery. This approach recognizes that breaches are inevitable, and the goal is to minimize impact and ensure continuous operation despite ongoing or future cyber threats.
Sponsorship and Final Notes
The episode is sponsored by ThreatLocker, Hawkshunt, and BlackKite, each providing solutions for security enhancement, employee training, and risk assessment respectively. The show concludes with references to the cultural depiction of resilience via the 'Terminator' movies, linking fiction to real-world cybersecurity concepts.
Sponsors
- Hawkshunt · Hawkshunt helps security teams prepare employees for phishing attacks with personalized training that adapts to each employee, reducing risky behavior over time.
- BlackKite · BlackKite created the BKGA3 AI Assessment Framework to provide a unified, evolving standard for measuring AI risk across organizations and vendors. It's free to use and built to adapt with the evolving threat landscape.
- ThreatLocker · ThreatLocker enforces zero trust at the point of execution with allow listing, ring fencing, and configuration management, providing visibility and control to minimize alert fatigue, stop ransomware, and ensure compliance.
Show notes
Please enjoy this encore of Word Notes.
The ability to continuously deliver the intended outcome despite adverse cyber events.
CyberWire Glossary link: https://thecyberwire.com/glossary/resiliency
Audio reference link: Cameron, J., 1984. The Terminator [Movie]. IMDb. URL www.imdb.com/title/tt0088247/.
Clip Nation, 2012. The Arnold Schwarzenegger “I’ll Be Back” Supercut [Video]. YouTube. URL www.youtube.com/watch?v=-YEG9DgRHhA.
Coops, C., 2013. Terminator 2 Theme [Video]. YouTube. URL www.youtube.com/watch?v=pVZ2NShfCE8.
Follow this show on AudioBrevity and new episodes get summarized for you. Create a free account