Cyber Resilience Definitions

Here's a curated list of the most reputable formal definitions of Cyber Resilience I could identify to date.

National Institute of Standards and Technology (NIST)
The ability to anticipate, withstand, recover from, and adapt to adverse conditions, stresses, attacks, or compromises on systems that use or are enabled by cyber resources. Cyber resiliency is intended to enable mission or business objectives that depend on cyber resources to be achieved in a contested cyber environment. Source: https://csrc.nist.gov/glossary/term/cyber_resiliency

Financial Stability Board (FSB)
The ability of an organisation to continue to carry out its mission by anticipating and adapting to cyber threats and other relevant changes in the environment and by withstanding, containing and rapidly recovering from cyber incidents.
Source: https://www.fsb.org/wp-content/uploads/P121118-1.pdf

European Central Bank (ECB)
Cyber resilience refers to the ability to protect electronic data and systems from cyberattacks, as well as to resume business operations quickly in case of a successful attack.
Source: https://www.ecb.europa.eu/paym/cyber-resilience/html/index.en.html

MITRE
Cyber resiliency (also referred to as cyber resilience) is the ability to anticipate, withstand, recover from, and adapt to adverse conditions, stresses, attacks, or compromises on cyber resources.
Source: https://www.mitre.org/sites/default/files/PR_17-1434.pdf

Bank for International Settlements, CPMI-IOSCO
An FMI’s (Financial Market Infrastructure) ability to anticipate, withstand, contain and rapidly recover from a cyber attack.
Source: https://www.bis.org/cpmi/publ/d146.pdf

Australian Securities and Investments Commission (ASIC)
Cyber resilience is an organisation’s capacity to prepare for, respond to and recover from cybersecurity events.
Source: https://download.asic.gov.au/media/5416529/rep651-published-18-december-2019.pdf

Stockholm University
Cyber resilience refers to an entity's ability to continuously deliver the intended outcome, despite adverse cyber events.
Source: https://en.wikipedia.org/wiki/Cyber_resilience

Search