Businesses are putting themselves at risk of cyberattacks — by recovering too fast
UK businesses are prioritizing post-attack recovery speed, and that's great, but they're missing out on some fundamental checks.
A recent report reveals that 74% of UK businesses are prioritizing rapid recovery over the quality of their post-attack response, putting themselves at risk of cyberattacks. Nearly as many, 70%, fail to verify that attackers have been completely removed from their systems after an attack. This issue is compounded by the fact that 76% of surveyed businesses focus too much on preventing cyberattacks rather than on effective recovery.
Business leaders appear to have a poor understanding of their IT teams' readiness, with only 52% believing that operations can resume within 24 hours. The lack of clarity on who should decide which systems get restored first adds to the confusion, with 23% suggesting the board, 21% the CTO, 20% the CEO, and 14% a security advisory board.
To address this, organizations should define their Minimum Viable Company (MVC), the smallest set of systems, processes, and services necessary for essential operations post-attack. However, only 41% have a definition of an MVC, and only 17% have a documented and tested definition.
Written by urgent.news from TechRadar's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
