# Resilience in the Context of Cyber Security: A Review of the Fundamental Concepts and Relevance
## 5 Challenges and Future Directions
Security and resilience in Industry 4.0 is also a challenge and requires an approach not only from a management point of view but also from an IT point of view, taking into account the three layers of exposure of cyber-physical systems: physical, network and computing [73]. Another cause for concern and one that requires more advanced studies are technologies that are considered radically new, such as AI, 5G, and 6G, the use of the cloud, high-performance computing, IoT and quantum computing [9]. Therefore, in order to make an organization more resilient, it is necessary to advance in the combination of cyber resilience and cyber security [5]. The cybersecurity capability framework also merits future research, in order to investigate the measurement of resilience levels of organizations' critical infrastructures from a socio-technical systems perspective to study the interrelationships between non-technical cybersecurity practices, human factors, and technical cybersecurity practices [74]. The resilience of electrical networks against possible cyber-attacks requires the implementation of algorithms and architectures in real-time simulation environments in order to optimize the performance of the cyber physical system in a cloud environment [75]. It is also necessary to advance the resilience perspective of cyber-physical systems to the detriment of traditional risk-based approaches, focusing research not only on investigating resilience from a technical perspective, but also from a socio-technical dimension [50]. One opportunity to improve the resilience of cyber-physical systems is to include natural disasters in the planning of such systems and to improve defense strategies [76]. In the healthcare field, cybersecurity is essential to ensure the privacy of patient data and the safety of medical devices. The adoption of emerging technologies, such as artificial intelligence (AI), big data, blockchain and cloud computing, has boosted digital transformation just as it has brought security risks. As such, organizations need to be fully aware of the threats that arise throughout the digital transformation process in order to provide greater resilience to healthcare organizations [4]. However, implementing security in the health sector remains a significant challenge due to the difficulty of implementation in the health sector, and more research is needed to understand this difficulty, not limited to issues related to the technology required, as well as the adoption of a sustainable and systematic approach to safety management [77]. Digital transformation in the health sector is becoming increasingly important in a post-industrial and knowledge-based society, where radical innovations in information technology necessitate effective management in terms of cybersecurity and resilience, despite the fact that there is still a lack of a comprehensive understanding of the factors that drive resilient and sustainable digital transformation in the health domain [78]. The complexity, breadth, and persistence of cyber-attacks means that there is a need for comprehensive research on the subject and not just from the perspective of a single discipline, i.e., there is a need for collaborative and interdisciplinary research [79]. In addition to the contributions made by this article, there are many other challenges related to the study of cyber resilience. Some of these challenges have already been listed above by the authors studied and others could be the subject of more in-depth studies proposed for future work. In addition, the authors of this article highlight the following gaps and challenges:How can we achieve a unified approach to managing an organization's risks, bringing organizational risk management closer to cyber risk management? In other words, how can cyber resilience issues be aligned with organizational resilience? How can we assess an organization's maturity in terms of its cyber resilience management processes?