This document establishes concepts for understanding and improving systems resilience. Systems resilience addresses the capabilities of systems under adversity. Broadly, systems resilience involves the capabilities of systems to avoid, withstand, and recover from adversity. Adversities can be known or unknown and can arise in many ways, such as security threats, dangers affecting safety, financial and business impacts from external system disruptions, from internal system faults and defects, and from adverse effects of disclosure or loss of data and information. Resilience goals are realized through application of techniques during requirements, architecture, design or operations processes of a system. This document is applicable to human-created systems that can be either physical or conceptual, or a combination of both. Systems include services and products. It is not intended to apply to naturally occurring systems.