Digital Resilience in Information Systems: A Systematic Literature Review of Conceptualization, Measurement, and Regulatory Alignment

Digital resilience has become an increasingly important concept in information systems research due to growing dependence on digital infrastructures, escalating cyber threats, and the emergence of regulatory frameworks that formalize resilience obligations. This study provides a systematic literature review of how digital resilience is conceptualized, operationalized, and aligned with emerging European Union (EU) regulatory frameworks. Following PRISMA 2020 guidelines, a systematic search was conducted across Scopus, Web of Science, and IEEE Xplore databases. Fifty-three peer-reviewed studies published between 2006 and 2026 were analyzed using a structured analytical coding framework capturing conceptual clarity, dimensional structure, methodological maturity, and regulatory alignment. The results reveal significant conceptual fragmentation across the literature. While governance, ICT risk management, incident response, and third-party risk management emerge as recurring resilience dimensions, definitional and structural convergence remains limited. Measurement approaches are dominated by maturity models and qualitative assessment frameworks, with relatively few studies proposing validated indicator-based models. Regulatory alignment with EU frameworks such as the Digital Operational Resilience Act (DORA) and the Network and Information Security Directive (NIS2) remains partial and inconsistent. The study identifies a structural alignment gap between regulatory resilience requirements, conceptual resilience models, and operational measurement approaches, providing a foundation for developing regulator-compatible digital resilience assessment frameworks.