Compliance

Cyber Resilience

Ability to prevent, detect and respond to cyber incidents.

How the laws define this

Both frameworks establish that cyber resilience is a capacity to address cyber incidents through active response actions and readiness. However, they diverge fundamentally in target scope and operational objectives. The Memorandum of Understanding between the Government of Romania and Google restricts the scope of cyber resilience to public institutions, focusing on collaborative activities, incident response, supply-chain security, joint exercises, knowledge exchange, and capability building. In contrast, the Malaysia Cyber Security Strategy 2020–2024 (MCSS) applies a much wider scope, defining cyber resilience across organisations, infrastructure, and society as a whole. Additionally, while the Memorandum of Understanding between the Government of Romania and Google centers on preventing, detecting, and responding to incidents, the Malaysia Cyber Security Strategy 2020–2024 (MCSS) emphasizes a broader operational cycle of anticipating, withstanding, adapting to, and recovering from disruptions to maintain the continuity of critical functions and ensure a return to normal operations with minimal loss.

Synthesised from the 2 statutory definitions below. Each one is quoted in full, with its source.

How jurisdictions differ

What is distinctive in each definition, binding law in force first.

Jurisdiction	Instrument	Status	What is distinctive
Romania	Memorandum of Understanding between the Government of Romania and Google (15 July 2024) — cooperation on digital infrastructure, cloud, cybersecurity and use of advanced technologies including AI	In Force	This definition narrows cyber resilience to public institutions and adds specific measures like incident response, supply-chain security, joint exercises, capability building, knowledge exchange and readiness assessments in a collaborative MoU.
Malaysia	Malaysia Cyber Security Strategy 2020–2024 (MCSS)	In Force	This definition widens cyber resilience to organisations, infrastructure and society, emphasising anticipation, withstanding, adapting, recovering, maintaining critical functions and minimising loss.

What it triggers

In the Memorandum of Understanding between the Government of Romania and Google, it describes collaborative cybersecurity activities, knowledge exchange and readiness assessments for public institutions.source
The Malaysia Cyber Security Strategy 2020–2024 sets out a national framework structured around five pillars to strengthen cyber resilience across government, critical infrastructure and society.source

Definitions (2)

The capacity of public institutions to prevent, detect and respond to cyber incidents, including measures for incident response, supply-chain security, joint exercises, and capability building described in the MoU. It guides collaborative cybersecurity activities, knowledge exchange and readiness assessments.

Memorandum of Understanding between the Government of Romania and Google (15 July 2024) — cooperation on digital infrastructure, cloud, cybersecurity and use of advanced technologies including AIDefinition 1 of 2

The capacity of organisations, infrastructure and society to anticipate, withstand, adapt to, and recover from cyber incidents and disruptions, maintaining continuity of critical functions and returning to normal operations with minimal loss.

Malaysia Cyber Security Strategy 2020–2024 (MCSS)Definition 2 of 2

Not to be confused with

cybersecurity

Cybersecurity refers to measures and capacities to protect networked systems, while cyber resilience focuses on the capacity to prevent, detect, respond, withstand and recover from incidents.

Active Defence

Active Defence is about proactive measures to detect and mitigate threats, whereas cyber resilience encompasses broader capacities including prevention, detection, response, adaptation and recovery.

Questions and answers

What does cyber resilience cover under the Romania-Google MoU?

It covers the capacity of public institutions to prevent, detect and respond to cyber incidents. It includes measures for incident response, supply-chain security, joint exercises and capability building. It guides collaborative activities and knowledge exchange.

How is cyber resilience defined in Malaysia's strategy?

It is the capacity of organisations, infrastructure and society to anticipate, withstand, adapt to, and recover from cyber incidents. This maintains continuity of critical functions with minimal loss.

What distinguishes cyber resilience definitions in these policies?

The Romania MoU limits it to public institutions with specific collaborative measures. The Malaysia strategy broadens it to organisations, infrastructure and society, stressing anticipation and recovery.