Compliance

Cyber Resilience

Ability to prevent, detect and respond to cyber incidents.

How the laws define this

Both frameworks establish that cyber resilience is a capacity to address cyber incidents through active response actions and readiness. However, they diverge fundamentally in target scope and operational objectives. The Memorandum of Understanding between the Government of Romania and Google restricts the scope of cyber resilience to public institutions, focusing on collaborative activities, incident response, supply-chain security, joint exercises, knowledge exchange, and capability building. In contrast, the Malaysia Cyber Security Strategy 2020–2024 (MCSS) applies a much wider scope, defining cyber resilience across organisations, infrastructure, and society as a whole. Additionally, while the Memorandum of Understanding between the Government of Romania and Google centers on preventing, detecting, and responding to incidents, the Malaysia Cyber Security Strategy 2020–2024 (MCSS) emphasizes a broader operational cycle of anticipating, withstanding, adapting to, and recovering from disruptions to maintain the continuity of critical functions and ensure a return to normal operations with minimal loss.

Synthesised from the 2 statutory definitions below. Each one is quoted in full, with its source.

Definitions (2)

The capacity of public institutions to prevent, detect and respond to cyber incidents, including measures for incident response, supply-chain security, joint exercises, and capability building described in the MoU. It guides collaborative cybersecurity activities, knowledge exchange and readiness assessments.

The capacity of organisations, infrastructure and society to anticipate, withstand, adapt to, and recover from cyber incidents and disruptions, maintaining continuity of critical functions and returning to normal operations with minimal loss.