Measuring cyber resilience in industrial IoT: a systematic literature review

Abstract In industrial environments based on the Industrial Internet of Things (IIoT) paradigm, the increasing use of advanced digital technologies and networked physical systems has resulted in new vulnerabilities to cyber-attacks, giving rise to the concept of cyber resilience. Cyber resilience, together with human-centricity and sustainability, represent the pillars of the fifth industrial revolution. Measuring the status of an organization in terms of cyber resilience can provide meaningful insight into its cybersecurity performance and is critical to effective business management. This study follows the systematic literature review (SLR) approach to investigate the concept of cyber resilience in the IIoT context, with a focus on metrics for measuring business performance in this area. In particular, the industries in which cyber resilience metrics are applied and the industrial assets involved are analyzed, with an emphasis on the system properties to be resilient. Finally, a tabular outline is proposed to efficiently collect all the metrics in the reviewed literature for cyber resilience assessment. This study aims to provide managers and industry experts with practical references, useful for discovering and choosing cyber resilience metrics based on organization’s strategic objectives.