One extreme defensive move for an enterprise would be to implement full redundancy for anything not hosted on-premises. Redundancy for data protection is relatively straightforward, but having multiple email, supply chain, or e-commerce services is very expensive and disruptive. What are the odds that it would even be needed? Whatever those odds were, they just became much higher.
“[This is going to require] new tabletop exercises where you go through these new scenarios,” said Erik Avakian, technical counselor at Info-Tech Research Group and former longtime CISO for the Commonwealth of Pennsylvania. “It is now prudent to have this type of disaster recovery resilience.”
Avakian added that many enterprises are already, to varying degrees, dealing with data redundancy, but duplicating apps and other executables is much more challenging. “Duplication of executables conversations are not [yet] happening,” he noted.
