The National Institute of Standards and Technology (NIST) has just published Special Publication (SP) 800-160 Volume 2, Developing Cyber Resilient Systems: A Systems Engineering Approach. It is the first in a series of specialty publications developed to support NIST SP 800-160 Volume 1, the flagship systems security engineering guideline. Volume 2 addresses cyber resiliency considerations for two important yet distinct communities of interest:

• Engineering organizations developing new systems or upgrading legacy systems employing systems life cycle processes, and
• Organizations with existing systems as part of their installed base currently carrying out day-to-day missions and business functions.

Both groups can apply the guidance and cyber resiliency considerations offered in this document to help ensure that the systems that they need, plan to provide, or have already deployed can survive when confronted by an advanced persistent threat (APT) actor.