Follow us
Add us as a preferred source on Google
- Report finds 74% of companies prioritize recovery speed over quality
- Companies are torn on whose responsibility is a recovery
- Defining a ‘Minimum Viable Company’ helps identify what needs to be fixed first
New Cohesity research has revealed that UK businesses may be putting themselves at risk from cyber attacks because they prioritize recovery speed over quality.
This applies to three out of four (74%) UK organisations, according to the report, with almost as many (70%) not even checking that attackers have been completely removed from breached systems following a cyber attack.
Spending also supports this, as three-quarters (76%) of surveyed businesses admit that cyber resilience investments focus too much on prevention rather than response and recovery.
Latest Videos FromTechRadar
Cybersecurity does not focus enough on effective recovery
Crucially, Cohesity data shows that business leaders have virtually no idea about the state of their IT teams’ readiness, with half (52%) of UK CEOs expecting basic business operations to resume within just 24 hours. A false sense of security could be part of why budgets are not directed to the right causes.
It is also clear that the responsibility for deciding which systems to restore first is still quite uncertain – 23% say it should be on the entire board, 21% pin it on the CTO, 20% on the CEO and 14% on a security advisory board.
The report urges all organizations to consider their Minimum Viable Company (MVC) – the minimum combination of systems, processes and services deemed necessary for a business to carry out essential operations following an attack.
With a clear MVC, teams will be better placed to know which systems are prioritized. But currently, two out of five (41%) do not even have their own definition of an MVC – on the other hand, not even one out of five (17%) has a documented and tested definition.
“If you restore a system before checking that the attacker’s access has really been removed, you risk re-infecting yourself,” UK&I VP Fraser Hutchison summarized.
Looking ahead, the next steps are pretty clear. Businesses must define which systems are most fundamental to their core operations and who holds responsibility for post-attack restoration.
Follow TechRadar on Google News in the add us as a preferred source to get our expert news, reviews and opinion in your feeds.