Operational continuity is the ability to keep essential services running through outages, maintenance, vendor changes, or other disruptions. In cyber security, it is more than simple uptime: it includes the people, systems, keys, identities, backups, and network paths needed to keep an organization functioning when a primary component fails.
This matters because attackers often target continuity, not just data. Ransomware can disable production systems, identity outages can block logins, and compromised or unavailable cloud services can interrupt business processes. Defenders build continuity with tested backups, failover systems, alternate authentication paths, documented recovery runbooks, and the ability to rotate keys or replace suppliers without breaking service. If these controls are only written in policy and never tested, the organization may look resilient on paper but still fail under pressure.