Quinn, S., Ivy, N., Chua, J., Barrett, M., Feldman, L., Topper, D. and Gardner, R.K. (2022) Using Business Impact Analysis to Inform Risk Prioritization and Response (No. NIST Internal or Interagency Report (NISTIR) 8286D (Draft)). National Institute of Standards and Technology, Gaithersburg. https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=935699
https://doi.org/10.6028/NIST.IR.8286D.ipd

has been cited by the following article:

• TITLE: Literature Review on Building Cyber Resilience Capabilities to Counter Future Cyber Threats: The Role of Enterprise Risk Management (ERM) and Business Continuity (BC)

  AUTHORS: Awini Thomas Assibi

  KEYWORDS: Enterprise Risk Management, ERM, Business Continuity, BC, Risk Assessment, Risk Mitigation, Risk Monitoring, Risk Reporting, Risk Culture, Crisis Management, Disaster Recovery, Business Resilience, Risk Governance, Risk Framework

  JOURNAL NAME: Open Access Library Journal, Vol.10 No.4, April 21, 2023

  ABSTRACT: The primary purpose of this paper is to critically explore the importance of building cyber resilience capabilities in organizations to counter future cyber threats. With the increasing sophistication and frequency of cyber-crimes, traditional security systems and techniques are no longer sufficient to combat them. To maintain business operations during and after a cyber-attack, it is essential to adopt a holistic approach to IT risks and create a robust cyber resilience program. The methodology adopted involved a systematic literature review on how Enterprise Risk Management (ERM) and Business Continuity (BC) contribute to building cyber resilience capabilities. The results showed that ERM and BC are critical components of cyber resilience and can help organizations identify, evaluate, and manage interruption risks. The paper concludes that organizations must maintain cyber resilience with efficient business continuity management and enterprise risk management frameworks as cyber hazards continue to increase.