## 1 Introduction
The integration of these approaches focuses on how systems can adapt, recover, and continue to function effectively despite facing disruptions [7; 33; 34; 35; 36; 37]. However, risk assessment methods, standards, and regulations for cyber resilience are overwhelming and in some cases overlapping. Selecting a minimum set of security requirements that properly address an organization's specific features while also complying with applicable standards and regulations has become increasingly challenging [38]. On the other hand, the body of knowledge of cyber resilience in many critical sectors is yet to develop. [PERSON] et al. [9], in their review on cyber resilience, highlighted the necessity of a systematic literature review (SLR) of cyber resilience frameworks. In addition, [PERSON] et al. [39] identified only 14 relevant articles in their review of cyber resilience within healthcare information systems. This necessitates a comprehensive review of methods, standards, and regulations in this domain, which, to the best of our knowledge, has not yet been undertaken in the literature. To fill this gap, this paper conducts an SLR on methods, models, standards, guidelines, and legislative frameworks that enhance cyber resilience by integrating resilience engineering with risk assessment. In particular, this study is designed to explore and answer key questions regarding methods, standards, and regulations that contribute to cyber resilience through risk assessment, making the following main contributions. * Identifying and classifying different risk assessment methodologies used for cyber resilience;
* Pointing out and investigating key standards and guidelines used in studies related to cyber resilience;
* Providing an overview of relevant regulations influencing cyber risk assessment for cyber resilience;* Highlights gaps in current research and practice, suggesting areas for further exploration in cyber resilience strategies. By conducting an SLR on cyber risk assessment for cyber resilience, this study provides a cyber resilience perspective on cyber risk assessment methods, standards, and regulations. This in turn helps provide insight into the integration of cyber risk assessment and cyber resilience to realize a holistic cybersecurity approach considering pre- and post-incident protection. The study offers a structured overview of diverse risk assessment methodologies and frameworks used in different CI domains, related standards that provide requirements to support these methodologies, and legislation that regulates their implementation. In this way, cybersecurity managers, decision-makers, and practitioners may adopt a suitable set of cyber risk assessment tools for cyber resilience that are acknowledged by cybersecurity standards and comply with related regulations. The remainder of this paper is structured as follows: Section 2 provides an overview of the relevant literature and foundational concepts. Details of the methodologies and techniques used in the research are set out in Section 3. The results of the SLR are presented in Section 4 and thoroughly discussed in Section 5. Finally, Section 6 concludes the paper, presenting research implications, limitations, and future scope.