Cyber resilience: what the new European framework requires and how to recover from a cyberattack
Cyber resilience complements cybersecurity: it is not only about preventing attacks but about keeping critical services running and resuming operations once a disruption has already occurred. The text cites ENISA's analysis of 8,257 incidents in 2025, led by DDoS (51.3%) and unauthorized access (39.5%), and reviews the NIST CSF 2.0 framework, RTO and RPO targets, and the obligations of the NIS2 directive and the Cyber Resilience Act (CRA) in Europe.
In 40 seconds
- ENISA analyzed 8,257 incidents from 2025: DDoS accounted for 51.3% and unauthorized access for 39.5%; public administration concentrated 31.8%.
- NIST CSF 2.0 organizes risk management into six functions: govern, identify, protect, detect, respond and recover.
- RTO and RPO define how long a service can be down and how much data can be lost; they should be set with operations and management.
IASummary generated by artificial intelligence from a story by El Ecosistema Startup. It may contain errors: the original source prevails.




Comments
Be respectful. Comments reported by several people are hidden until a moderator reviews them.
You do not need an account to read, only to comment. Sign in with a code sent to your email or with your Google account. We only show the name you choose, never your email.