Lessons from CrowdStrike on Safeguarding Your Data with Compliance, Continuity and Disaster Recovery Strategies
Where were you when the CrowdStrike outage hit? Many of us were stuck in our tracks when the recent global IT outage, triggered by a faulty software update from cybersecurity firm CrowdStrike, brought critical infrastructure to a standstill and potentially cost Fortune 500 firms $5.4 billion in losses, according to insurance firm Parametrix.
It was a day that will live in IT infamy.
This disruption revealed the fragility of our interconnected digital world. While the root cause was a technical glitch rather than a cyberattack, it exposed the potential consequences of service disruptions on business operations.
Outages that catch us off guard serve as stark reminders of the importance of robust disaster recovery (DR) strategies. But panic-inducing events like the CrowdStrike one provide an opportunity for companies to reassess and strengthen their data reliability, availability, and resilience.
Continuous DR planning can enable companies to reduce downtime, data loss, and operational disruptions while maintaining business continuity by restoring critical applications and infrastructure, ideally within minutes after an outage.
The Cost of DR Apathy
Whether outages are caused by human errors or equipment failures, not having a proper DR plan can be expensive, with the financial cost of downtime ranging from $2,800 per hour for on-premises workloads to $3,275 per hour for public cloud workloads, according to a recent IDC Report. Scale up, and the lack of DR action could end up costing as much as $1 million per hour for Fortune 1,000 companies.
That’s why it’s so critical to plan for the worst. Strategizing with partners can foster a level of transparency and communication that is invaluable for cross-enterprise collaboration. A trusted and reliable hybrid cloud data partner can turn adversity into opportunity, strengthening customer relationships by providing expert guidance on achieving stabilization.
Yet despite high-profile cautionary tales and increasing business continuity regulations such as those stipulated by GDPR, many customers have yet to test their DR plans – and some lack them entirely.
This lack of preparedness is pervasive, and the proof is in the data. Notably, Hitachi Vantara’s Modern Data Infrastructure Dynamics report found that:
- Nearly a quarter (22%) of those surveyed admitted important data isn’t being backed up, while an additional 18% cited being unable to access data in the past two years because it was corrupted.
- A robust majority of IT decision-makers (68%) have concerns over whether their organization’s data infrastructure is resilient enough to recover all their data from any ransomware attack.
- Employees continue to be the weakest security link for many organizations. Only 29% are extremely confident their employees are following their security policies.
These wake-up call statistics should be a clarion call for proactive leaders. Organizations need to seek a resilient data storage and infrastructure partner that will collaborate closely to establish robust DR strategies, incorporating essential components like replication, data backup, and remote sites and testing – ultimately ensuring compliance and resilience against potential disruptions, including ransomware attacks and outages. IT leaders including CIOs should also perform an in-depth analysis of their systems and IT infrastructure to prepare for the inevitable.
While there are endless variations of data or cloud infrastructure calamities, these five vital strategies will help your organization establish resilient DR plans and ensure uninterrupted operations:
Take Stock of Vulnerabilities
Begin with the basics by performing an in-depth evaluation of your IT infrastructure and operational weak points. Pinpoint critical systems, data interdependencies and potential failures. This crucial analysis will form the foundation for developing custom DR plans that align with your organization’s risk tolerance and regulatory obligations.
Draft Plans to Dodge Disruption
Draft comprehensive DR plans that outline explicit protocols for managing disruptions. Plot procedures for data backup, recovery and restoration. Regularly assess these plans through rigorous testing to gauge their effectiveness and uncover areas for improvement. Real-world simulations and scenario-based drills are indispensable for ensuring readiness when crises occur.
Rinse and Repeat Redundancy
Utilize advanced technologies like data replication and distributed computing to build redundancy across diverse geographical locations. This approach not only bolsters data accessibility but also minimizes the impact of localized disruptions, including power outages or hardware malfunctions.
Anticipate and Address Regulatory Changes
Take preemptive measures to stay ahead of evolving regulatory frameworks such as GDPR, ensuring compliance. Align your DR strategies with regulatory mandates to protect sensitive data and maintain operational resilience. Engage legal and compliance specialists to navigate intricate regulatory requirements effectively.
Pursue a Preparedness Mindset
Cultivate a work environment where every team member recognizes their role in preserving business continuity. Offer continuous training and awareness programs to enhance staff readiness in responding to emergencies. Encourage transparent communication channels and cross-departmental collaboration to enable rapid and coordinated responses during critical situations.
Data infrastructure providers can transform disruptive incidents into opportunities by navigating the pitfalls of risk and employing expertise to guide customers to resilience. By helping organizations overcome regulatory hurdles and better prepare for uncertainties, strategic planning empowers sustainable success and builds partnership trust that stands the test of time and whatever disasters come our way.
The post The Day the IT World Stood Still appeared first on Cybersecurity Insiders.
September 17, 2024 at 08:55AM
0 comments:
Post a Comment