Opinion argues cyber resilience is the test after prevention fails
Original title: When prevention fails: Why cyber resilience is the next big test of trust
The column uses NIST resiliency goals and backup trust to argue recovery must outlast a successful attack.
A CSO Online contributor opinion says controls that block attacks are not enough if organizations cannot continue essential work and restore trusted systems. It contrasts cybersecurity with cyber resilience and cites NIST goals to anticipate, withstand, recover, and adapt. The piece discusses untrusted backups during ransomware and zero trust as a way to limit movement, without reporting a new incident.
- CISA’s #StopRansomware Guide is cited for offline, encrypted, tested backups.
- A shared administrator account could expose both production systems and backups.
- Restoring from an infected environment could let an attacker return.
- Zero trust is described as limiting access, not replacing recovery planning.
From the original article
7 min read at csoonline.com
Imagine arriving at work on a Monday morning to find employees cannot log in, customer service is unavailable, and critical business applications have stopped working. Security alerts are flashing. The IT team is investigating.
csoonline.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.