It is already understood that security cannot be guaranteed. Numerous examples of security incidents prove that, and direct both researchers and practioners to explore the opportunities for development of security systems that are resilient. A common feature of the resilient systems is that they preserve the functionality of core processes and their supporting assets under perturbations. This report presents the results of a study aiming to deliver a conceptual model of the system for resilience in the field of security, that is supported by theoretical arguments and applicable in practice.