How To Prepare For Cyberwar: It Starts With Identity

Semperis argues that testing backups under ideal conditions creates only an illusion of resilience; real cyber resilience is about staying recoverable when the plan fails and the assumptions behind it collapse.

Semperis argues AI-driven attacks are outpacing identity teams as machine identities outnumber human ones 10:1, and urges building organization-wide cyber resilience around hybrid identity protection before the next crisis.

Ex-bp CISO Simon Hodgkinson argues disaster recovery is too narrow for today's threats: operational resilience must span governance, business continuity, and third-party supplier risk.

Former bp CISO Simon Hodgkinson on the HIP Podcast: operational resilience is broader than disaster recovery—spanning governance, business continuity and cyber risk—plus lessons from the $1M Colonial Pipeline fine.

A practical look at the ROI of fast AD recovery: quantifying lost operations while AD is down (Baltimore's $18M hit), why ransomware crews target AD objects—group accounts, GPOs, SYSVOL, DCs—and why continuity plans must cover AD.

A survey of 350-plus security professionals finds a preparation gap: 97% call AD mission-critical, 84% expect severe impact from an outage, yet only 3% are extremely confident in fast recovery and over half never tested their AD recovery plan.