2025网络韧性指南 .docxVIP

IncollaborationwiththeUniversityofOxford

TheCyberResilienceCompass:JourneysTowardsResilience

WHITEPAPERAPRIL2025

Images:GettyImages

Contents

Foreword 3

Executivesummary 4

1.Unpackingcyberresilience 5

2.TheCyberResilienceCompass 7

3.Learningsfromfront-linepractice 8

3.1Leadership 8

3.2Governance,riskandcompliance 10

3.3Peopleandculture 12

3.4Businessprocesses 14

3.5Technicalsystems 16

3.6Crisismanagement 18

3.7Ecosystemengagement 20

Conclusionandnextsteps 22

Methodology 22

Contributors 23

Acknowledgements 23

Disclaimer

ThisdocumentispublishedbytheWorldEconomicForumincollaborationwiththeGlobalCyberSecurityCapacityCentre(GCSCC),UniversityofOxford,asacontributiontoaproject,insightareaorinteraction.Thefindings,interpretationsandconclusionsexpressedhereinaretheresultofacollaborativeprocessfacilitatedandendorsedbythe

WorldEconomicForumbutwhoseresultsdonotnecessarilyrepresenttheviewsofthe

WorldEconomicForum,northeentiretyofitsMembers,Partnersorotherstakeholders.

?2025WorldEconomicForum.Allrightsreserved.Nopartofthispublicationmaybereproducedortransmittedinanyformor

byanymeans,includingphotocopyingandrecording,orbyanyinformationstorageandretrievalsystem.

TheCyberResilienceCompass:JourneysTowardsResilience 2

April2025 TheCyberResilienceCompass:JourneysTowardsResilience

Foreword

AkshayJoshiHead,CentreforCybersecurity,

WorldEconomicForum

Cyberresiliencematters.Asbusinessesandgovernmentscontinuetoevolvetheiruseofdigitaltechnologiesanddata,globaldependenceoncyberspacecontinuestogrow.Thisincreasingrelianceexposesorganizationsandindividualstoheightenedcyberrisksatatimewhenthreatactorsarebecomingmoresophisticated,well-resourcedandinnovative.

Cyberresilienceacknowledgesthatnosystemisentirelysecure.Traditionalcybersecurityeffortshaveevo