It determines the ability of a system to adapt to changing conditions, as well as to prepare for, respond to and recover from any disruption caused by cyber attacks.