The leadership of cyber resilience: from controls to choices

We live in an increasingly digital, complex, and volatile world. Organizations need to be able to prevent, absorb and respond to shocks caused by disruptions of digital services. These are, for example, due to ransomware attacks on suppliers or unavailability of cloud services. In this article, we will explain that the required digital resiliency is not only a technical problem, but a leadership and decision-making topic and hence requires new or improved governances. Cyber resilience is not only about controls, but about choices and how we make them. We conclude with providing practical guidance to improve the leadership of cyber resilience.