Cybersecurity Requires Collective Resilience: Leaders must coordinate with other organizations in their ecosystem to prevent and respond to cyber risk.

The article focuses on the concept of "collective resilience" in cybersecurity, emphasizing the need for organizations to coordinate across ecosystems to prevent and respond to cyber risks effectively. It contrasts collective resilience with traditional operational resilience by highlighting the importance of multi-organization collaboration to maintain critical services during disruptions, as demonstrated by a 2024 Business Resilience Council (BRC) exercise simulating a large-scale disruption of the Automated Clearing House (ACH) electronic payments system. Key recommendations include establishing secure communication channels with vendors, defining minimum viable service levels (MVSLs) for critical services, rehearsing impaired service delivery, and shifting from third-party risk management to co-resilience through joint exercises. The article underscores that ecosystem-wide coordination and preparation are essential to limit systemic impacts and maintain service continuity during cyber incidents. [Extracted from the article]