Guest on TechTV Talking Restoring Post-Incident Trust
I was recently a guest on TechTV talking about one of my most enduring themes in cyber resilience:
Recovering data is not the same as recovering an organisation.
Following a destructive cyberattack, having an immutable, recoverable copy of your data is critical. But recovery introduces a much harder question:
Can you trust what you are restoring?
Do you know when the attacker first gained access? Which recovery points predate the compromise? Can you trust identity? Have persistence mechanisms been removed? And what evidence is sufficient to reconnect a recovered service to production?
This is why cyber recovery increasingly becomes a process of reconstructing trust across identity, infrastructure, applications and data, while making difficult decisions with incomplete evidence and intense pressure to restore the business.
I discussed this, and the changing rules of cyber resilience, with TechTV.
Technology can restore data. The organisation has to restore trust.
Watch the interview here:
