Digital resilience of an organization in risk management

Abstract

Objectives The study aimed to assess how implemented protection and monitoring measures in an ICT environment strengthen organisational resilience in security science terms - namely the ability to maintain operational continuity, reduce vulnerabilities and disruption impacts, and improve early detection and assessment of security-threatening events. Material and methods This study used a practical approach, combining an in-depth case analysis with a hands-on simulation. The team designed an ICT environment featuring separate zones with different trust levels and specific access-control rules. They then tested the setup by simulating system failures, assessing the effectiveness of zone separation and access controls, and running realistic scenarios involving attempts at unauthorised access and privilege escalation. Data included connectivity continuity metrics (latency, packet loss) and SIEM-registered events and alerts. Results The organisation demonstrated greater effectiveness in handling disruptions and threats. When failures occurred, only a brief dip in connectivity was observed (about 8% packet loss), and the system’s access controls and network segmentation prevented all unauthorised communication attempts from reaching the network during testing. At the same time, the monitoring tools helped the team quickly spot and categorise events that could lead to security incidents. This made it easier to stay aware of what was happening and to respond quickly when needed. Conclusions In conclusion, the steps taken created a strong security system that reduced risks, prevented problems from worsening, and helped spot threats earlier. Because of these measures, the organisation is better prepared to keep its services running, control access, and handle incidents, which means fewer disruptions and less damage to its reputation.