Cyber resilience: what the new European framework requires and how to recover from a cyberattack
Cyber resilience complements cybersecurity: it is not only about preventing attacks but about keeping critical services running and resuming operations once a disruption has already occurred. The text cites ENISA's analysis of 8,257 incidents in 2025, led by DDoS (51.3%) and unauthorized access (39.5%), and reviews the NIST CSF 2.0 framework, RTO and RPO targets, and the obligations of the NIS2 directive and the Cyber Resilience Act (CRA) in Europe.



















