Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

New survey reveals dangerous gaps in crisis management plans

semperis.com | blog | #active-directory | #survey | #testing | #disaster-recovery | #business-continuity | #crisis-management

Summary

A survey of 350-plus security professionals finds a preparation gap: 97% call AD mission-critical, 84% expect severe impact from an outage, yet only 3% are extremely confident in fast recovery and over half never tested their AD recovery plan.
Published
Collected

original ↗

Related coverage

blog · semperis.com
Backup Testing Is Not Cyber Resilience: Lessons Learned Robbing a Bank
Semperis argues that testing backups under ideal conditions creates only an illusion of resilience; real cyber resilience is about staying recoverable when the plan fails and the assumptions behind it collapse.
blog · semperis.com
Operational Resilience: More than Disaster Recovery
Ex-bp CISO Simon Hodgkinson argues disaster recovery is too narrow for today's threats: operational resilience must span governance, business continuity, and third-party supplier risk.
blog · semperis.com
Achieving Operational Resilience with Simon Hodgkinson
Former bp CISO Simon Hodgkinson on the HIP Podcast: operational resilience is broader than disaster recovery—spanning governance, business continuity and cyber risk—plus lessons from the $1M Colonial Pipeline fine.
blog · semperis.com
The Practical ROI of a Quick Active Directory Recovery
A practical look at the ROI of fast AD recovery: quantifying lost operations while AD is down (Baltimore's $18M hit), why ransomware crews target AD objects—group accounts, GPOs, SYSVOL, DCs—and why continuity plans must cover AD.
blog · semperis.com
The Dos and Don’ts of AD Recovery
Ransomware makes total AD meltdown realistic, but recovery practice has barely changed in 15 years; DXC's Guido Grillenmeier lists AD recovery dos and don'ts—from detailed plans to offline backups.
blog · semperis.com
How To Prepare For Cyberwar: It Starts With Identity
Cyberwar readiness starts with identity: Semperis CEO Mickey Bresman urges testing AD recovery plans at least every 13 months by restoring production backups into an isolated lab.
back