Improving Cyber Resilience: Converging Cyber Defence and Security

Abstract

Information and operational technology security are closely related to cyber security, which is defined by
its varied variety of methodologies, tools, and ideas. An offensive information technology strategy with the
goal of accomplishing antagonistic goals is what sets cyber security apart. However, customers and security
experts alike may get confused due to the loose and unregulated usage of the term "cyber security," which
is often confused with information security or IT security. Despite their interdependence, the merger of
these fields obscures significant distinctions among them. The authors of this paper make a bold proposal
to those in charge of security: restrict the term "cyber security" to describe only those practices that are
defensive in nature and heavily reliant on IT and operational tech environments and systems. Cyber
defence is an important tool for computer network security because it prevents malicious attacks,
safeguards critical infrastructure, and guarantees the integrity of data for many different types of
businesses, government organisations, and linked networks [3]. With an emphasis on how the concept of
cyber resilience came to be, this research mostly looks at how cyber defence and security interact with one
another. In this study, we provide a novel theoretical framework for comprehending cyber resilience, which
clarifies the intricate relationship between the aforementioned fields. Moreover, the authors of this model
take a close look at the strategies and procedures that are vital to strengthening cyber defences and security
in light of the growing number of cyber threats. A look at the past, present, and future of CRRT and MACS
is presented in this article. More strong resilience and unified defence against the ever-changing threat
landscape is possible at the EU level via the innovation policy.