Deterrence by Resilience

Deterrence by resilience is a relatively recent addition to the classical deterrence vocabulary, which traditionally distinguished between deterrence by punishment (threatening unacceptable retaliation) and deterrence by denial (preventing the adversary from achieving operational objectives). Resilience-based deterrence shifts the focus from the attack itself to the consequences an attacker hopes to produce: if a target state can absorb a strike — cyber, kinetic, informational, or economic — and continue to function, the strategic payoff of attacking collapses.

The concept gained traction in policy circles dealing with so-called hybrid or gray-zone threats, where adversaries operate below the threshold of armed conflict and where attribution and retaliation are difficult. It is particularly prominent in:

• Cyber strategy, where rapid recovery, redundancy, and segmentation can blunt the leverage of intrusions or ransomware.
• Critical infrastructure protection, especially energy, telecoms, and undersea cables.
• Societal resilience against disinformation, election interference, and economic coercion.

NATO has incorporated resilience as a core element of collective defence since the 2016 Warsaw Summit, which set baseline requirements across seven civil preparedness areas, and reinforced this in the 2022 Strategic Concept. The EU's Strategic Compass (2022) and the European Commission's work on a Preparedness Union similarly treat resilience as a contribution to deterrence. Finland and Sweden's "total defence" models are often cited as practical templates.

Critics argue the term stretches the logic of deterrence beyond recognition: resilience may reduce damage without ever entering an adversary's cost-benefit calculus, and it offers no clear signalling mechanism. Proponents counter that visibly demonstrated resilience — drills, stockpiles, public communication — does communicate futility to potential attackers, especially those pursuing coercive rather than destructive aims. The concept therefore sits at the intersection of defence policy, civil protection, and strategic communication.