Cyber Resilient Technologies (CyRes)
CyRes is TCG's cyber-resilience technology for defining protection, detection, and recovery capabilities that use trusted computing primitives to protect persistent code and configuration, detect unexpected states, and support reliable platform recovery across the device lifecycle. CyRes complements broader resilience guidance such as NIST SP 800-193 by developing TCG-specific technologies and requirements.
Core capabilities
What CyRes delivers
A three-part framework covering how platforms guard against, identify, and recover from compromise.
Defined requirements for keeping persistent code and settings intact across the device lifecycle.
Reusable hardware and firmware components that implementers combine to build resilient platforms.
Mechanisms that surface when a platform has drifted from its expected configuration.
Update and recovery paths designed to complete safely even when interrupted or attacked.
A baseline model that applies across client, server, IoT, and network platforms alike.
Recovery behavior can be tuned to the constraints of each device class or deployment domain.
[ 01 ]
A three-part framework covering how platforms guard against, identify, and recover from compromise.
Defined requirements for keeping persistent code and settings intact across the device lifecycle.
Reusable hardware and firmware components that implementers combine to build resilient platforms.
Mechanisms that surface when a platform has drifted from its expected configuration.
Update and recovery paths designed to complete safely even when interrupted or attacked.
A baseline model that applies across client, server, IoT, and network platforms alike.
Recovery behavior can be tuned to the constraints of each device class or deployment domain.
Protection of recovery images and update mechanisms.
Detection of unauthorized changes to firmware or configuration.
Recovery from failed or malicious updates, or denial of service attacks.
Resilient client, server, IoT, embedded, and network platforms.
Device lifecycle resilience across manufacturing, deployment, update, and recovery.
Enterprise-managed recovery policies.
Component-level resilience in complex platforms.
Primary features
Key capabilities of the CyRes requirements
[ 01 ]
Cyber Resilient Module and Building Block Requirements
[ 02 ]
Protection, detection, and recovery architecture
[ 03 ]
Module profiles for different industry scenarios
[ 04 ]
Platform-independent baseline recommendations
[ 05 ]
Integration with trusted computing technologies such as TPM, DICE, BIT, RIM, Platform Certificates, and Storage Security
[ 06 ]
Alignment with NIST SP 800-193-style platform resilience objectives
[ 07 ]
Support for future platform-specific resilience requirements
Cyber Resilient Module and Building Block Requirements
The core requirements defining what makes a module and its building blocks resilient.
Protection, detection, and recovery architecture
The architectural model tying the three resilience functions together on a platform.
Module profiles for different industry scenarios
Profiles that adapt the baseline requirements to the needs of specific industries.
Platform-independent baseline recommendations
A common set of recommendations that hold regardless of platform type.
Integration with trusted computing technologies such as TPM, DICE, BIT, RIM, Platform Certificates, and Storage Security
CyRes builds on existing TCG technologies rather than replacing them.
Alignment with NIST SP 800-193-style platform resilience objectives
Complements established industry guidance on platform firmware resiliency.
Support for future platform-specific resilience requirements
The framework is designed to extend as new platform categories emerge.
capability 01
Work Groups
Related TCG Work Groups that leverage CyRes
Cyber Resilient Technologies (CyRes)
Owns CyRes requirements, architectures, module profiles, building blocks, and related guidance.
Trusted Platform Module (TPM)
Provides TPM-backed identity, measurement, secure storage, and attestation primitives that can support resilience.
Attestation
Provides evidence and appraisal concepts for detecting unexpected or compromised states.
Storage
Supports protection of persistent data, recovery assets, and storage security mechanisms.
Other Work Groups
PC Client, Server, IoT, Vehicle Services, Network Equipment, Mobile, and Infrastructure Work Groups can define or consume CyRes requirements for platform-specific resilience.
Reference sources
Explore the CyRes documentation
Cyber Resilient Technologies (CyRes)
Protection techniques lessen the likelihood that malware is able to persist itself and provide techniques for better protecting code and data.
View moreCyber Resilient Module and Building Block Requirements
Defines the requirements for resilient modules and the building blocks used to construct them.
View moreReference sources
Explore the CyRes documentation
Explore other Technologies
Trusted Platform Module (TPM)
TCG's standardized hardware Root of Trust for protecting keys, recording platform measurements and supporting attestation across every class of device.
Block Integrated Trust (BIT)
TCG's component-level hardware Root of Trust for constrained devices, giving integrated components their own identity and attestation.
Storage Security
TCG's architecture for interoperable security on trusted storage devices: self-encrypting drives, access control, locking and Opal, Ruby and Opalite classes.
Explore other Technologies
Trusted Platform Module (TPM)
TCG's standardized hardware Root of Trust for protecting keys, recording platform measurements and supporting attestation across every class of device.
Block Integrated Trust (BIT)
TCG's component-level hardware Root of Trust for constrained devices, giving integrated components their own identity and attestation.
Storage Security
TCG's architecture for interoperable security on trusted storage devices: self-encrypting drives, access control, locking and Opal, Ruby and Opalite classes.
Become part of TCG
Membership is open to corporations, start‑ups, government, academia, and non‑profits. Join to influence specs in Work Groups, access drafts, network with experts, and submit products for TCG Certification.