5. Cyber-resilience activities and continuous improvement plan

Crises linked to cyber-attacks or cyber-crime can generate anxiety, prompting us to act with a sense of urgency. During a disaster, we may identify vulnerabilities in our processes, in our human activities or in our technological security measures. Although very negative, these chaotic situations very often highlight a certain immaturity in the organization of our cyber defense. They demonstrate that a posture focused exclusively on cost reduction is totally at odds with efficient cyber resilience activities. They show that the absence of an effective risk assessment is all too often induced by a significant reduction in the finances allocated to our cyber defense....