# Resilience in the Context of Cyber Security: A Review of the Fundamental Concepts and Relevance
## 6 Conclusions  
The study of resilience has been a highly relevant area of knowledge for organizations in all sectors, whether public or private, because resilience is required to ensure the continuity of an organization's services in unexpected circumstances and its survival in crisis scenarios. Section 3.1 presented the most varied definitions of resilience found in the literature for several concepts of resilience (organizational resilience, operational resilience, and cyber resilience).  
Section 3.2 also looked at cyber resilience is one of the factors that concern organizations and demands focus for its appropriate understanding, planning, and effective adoption, considering the strong dependence of organizations on digital technologies to carry out their business, independent of their sector (industry, aviation, finance, etc.).  
The analysis of cyber resilience concepts reveals that, in general, there is agreement that cyber resilience can be defined as the ability to resist, respond, and adapt in crisis situations. Section 3.3 mapped the definition of resilience given by the authors studied and consolidated it in Table 1. Section 4 analyzed these different proposed stages and their evolution over the years and presented a proposed representation of the stages of cyber resilience (Figure 4).  
Thus, cyber resilience can therefore be characterized in four basic stages, in response to a crisis: Monitoring-Detection, Resistance-Absorption, Response-Adaptation, and Recovery-Reconstruction. In addition, there is also a Preparation-Planning stage (before a crisis) and a Learning-Optimization stage (after a crisis) (Table 2).  
Although there is no consensus in the literature about the stages of resilience planning and post-crisis learning, in general, the Preparation-Planning stage is more concerned with information security management, i.e., the efforts needed to structure and improve security actions, while the Learning-Optimization stage is more concerned with improving the resilience system.  
Finally, it is important to note that this study will serve as a basis for evaluations of resilience in organizations, as part of an empirical study that the authors of this paper are preparing. Although the proposed model for representing the stages of cyber resilience may still present nuances related to the interpretation of the literature review, we are confident that such kind of empirical study brings consistent contributions to the cyber resilience field.  
Conceptualization, M.S.d.A.; methodology, M.S.d.A.; software, M.S.d.A.; validation, F.U.P.; formal analysis, F.U.P.; investigation, M.S.d.A.; resources, M.S.d.A.; data curation, M.S.d.A.; writing--original draft preparation, M.S.d.A.; writing--review and editing, M.S.d.A., B.A.S.M. and F.U.P.; visualization, M.S.d.A.; supervision, F.U.P.; project administration, M.S.d.A. All authors have read and agreed to the published version of the manuscript.  
Funding: This research received no external funding. Institutional Review Board Statement: Not applicable. Informed Consent Statement: Not applicable. Data Availability Statement: The original contributions presented in the study are included in the article, further inquiries can be directed to the corresponding author. Acknowledgments: The authors are grateful to University Center SENAI/CIMATEC (National Service for Industrial Training), Oswaldo Cruz Foundation-Fiocruz, and CNPq ([PERSON] is a Technological fellow from CNPq 306041/2021-9). Conflicts of Interest: The authors declare no conflicts of interest.