Today's CrowdStrike outage is a stark reminder of the importance of resilient and well-tested IT systems. Arootah Cybersecurity experts weigh in on the impact of the largest outage in history: "We can mitigate the risks of similar incidents by adopting best practices, fostering government-private sector collaboration, and adhering to regulatory standards. Enhancing cybersecurity resilience requires a collective effort, leveraging the strengths and resources of both public and private sectors to build a more secure digital ecosystem." - Dominic K "From the perspective of the disruption of services (and Blue Screens of Death), this incident illustrates the need for contingency planning, redundancy, backups, and crisis management. Organizations need regular backups and the ability to restore to the last known good configurations. They also need to have procedures to communicate, reference Standard Operating Procedures, restore from last known good, etc., all without their "normal" systems. One lesson learned from this incident would be to gradually roll out updates through an organization to evaluate their compatibility and reliability before rolling out updates organization wide. This practice should be implemented wherever external applications and OS patches are deployed. The irony of this incident is that one of the canons of good cyber security is to "patch early and often." But in this case, the security software caused the problem. Any organization that could selectively roll out patches/updates in a test environment first would have seen this bug and potentially prevented a larger problem on a production environment." - CP Learn more about Arootah's Advisory services and work with our team of experts to make smarter cybersecurity decisions and reduce risk. Get started here: https://lnkd.in/dp77nHkg #crowdstrike #cybersecurity #bestpractices
Arootah ’s Post
More Relevant Posts
-
Vice President - Technology & Cyber Risk | CISM | CCSP | CCIP | Chairman’s Award Recipient | ISACA Melbourne | Mentor | Speaker | more importantly a good listener | problem solver | who gets things done
Reflections on the Recent CrowdStrike Outage As cybersecurity professionals, we are all aware of the critical role endpoint protection platforms play in safeguarding our digital infrastructure. The recent outage experienced by CrowdStrike serves as a stark reminder of the inherent risks and challenges even leading cybersecurity companies face. Key Takeaways 1. Resilience Planning: It's imperative for organizations to have robust contingency plans. While outages are rare, they can have significant impacts. Businesses must ensure they have failover mechanisms and backup solutions to maintain security operations continuity. 2. Communication is Key:CrowdStrike's transparent communication throughout the outage was commendable. During such incidents, timely and clear updates are crucial for maintaining trust and allowing customers to adjust their security postures accordingly. 3. Multi-Layered Security Approach:Relying solely on one solution can be risky. A multi-layered security strategy incorporating different tools and technologies can help mitigate the impact of such outages. Diversifying security solutions can offer additional layers of protection. 4. Vendor Assessment:Regularly assess your vendors for their resilience and response strategies. Understanding their disaster recovery plans and SLAs can provide insights into how they might handle potential disruptions. 5. Lessons Learned:Every incident offers valuable lessons. Post-outage, it's essential to conduct thorough reviews and understand what went wrong, how it was addressed, and what improvements can be made moving forward. Cybersecurity is a dynamic and ever-evolving field. Incidents like these underscore the importance of staying vigilant, adaptive, and proactive in our strategies. Let’s continue to learn and grow from these experiences to fortify our defenses against the ever-present threats in the digital landscape. Stay safe and secure! #Cybersecurity #CrowdStrike #EndpointProtection #BusinessContinuity #CyberResilience #Infosec
To view or add a comment, sign in
-
-
ICT Sector| Market Research| 7+ Years of Experience| Research Analyst | AI Enthusiast | Strategy Consultant | Market Forecasting| Passionate about AI-driven Insights| Industry Analysis| Competition Benchmarking
💡 From Outage to Opportunity: Lessons from the CrowdStrike Outage ⚡ 📢 In the wake of the recent CrowdStrike outage, it's crucial to reflect on the lessons learned and the implications for cybersecurity and business continuity. 🌏 💵 The incident, caused by a software update defect, not a cyber attack, led to significant disruptions worldwide, affecting critical services and causing an estimated financial damage of at least $5 billion. This event underscores the high dependency on reliable cybersecurity solutions and the risks associated with software bugs. 🌟 🏛 Businesses must recognize the importance of diversifying their cybersecurity strategies and considering multicloud environments to mitigate the impact of such outages. The CrowdStrike incident serves as a stark reminder of the potential business impact when a single point of failure occurs. 🚀 ✨ As we navigate through the complexities of digital resilience, let's prioritize continuous improvement in our cybersecurity postures to safeguard against both software bugs and cyber threats. The CrowdStrike incident is a call to action for all stakeholders to bolster their systems and prepare for unforeseen challenges in the digital landscape. ✨ #Microsoft #CrowdStrikeOutage #Cybersecurity #DigitalResilience #BusinessContinuity #RiskManagement #IncidentResponse #MulticloudStrategy
To view or add a comment, sign in
-
#ZeroTrust security is not just for large organizations, it's a model that can be adapted to the needs of any organization. Here are the top 8 reasons organizations should move to implement a Zero Trust security framework. #scalablesecurity #businesssecurity
To view or add a comment, sign in
-
‘Point solutions just need to die’: The end of the one-trick security tool” I could not agree with this statement more. My role is to partner with my clients to build a comprehensive information security program and strategy. The security solutions used are a means to end. I find IT decision makers get caught up with point solutions. It is like plugging a security solution into a hole in the boat, the challenge is there are too many holes. I am not saying do not use best in class solutions but firstly you need to understand how they fit into your security strategy. Back to Basics: I believe strongly in the basics such as patch management, identity and access management and a layered approach to security regarding prevention and detection tools and services. Education: Understanding zero trust platforms and how the vendors and service providers are evolving their solutions and offering is a must. SASE (Secure access service edge) model and the M365 feature set is a great place to start. 📢 Summary: Point solutions lead to solution sprawl and overlap. Simplify your approach, consolidate your security stack and drive a security strategy against a known framework such as NIST. Accelerate Partners, w/ (JP) John Panzica #technologyconsulting #cybersecurity https://lnkd.in/egkJdFQ6
‘Point solutions just need to die’: The end of the one-trick security tool
cybersecuritydive.com
To view or add a comment, sign in
-
𝐌𝐚𝐢𝐧 𝐛𝐞𝐧𝐞𝐟𝐢𝐭𝐬 𝐨𝐟 𝐦𝐚𝐧𝐚𝐠𝐞𝐝 𝐈𝐓 𝐬𝐞𝐫𝐯𝐢𝐜𝐞𝐬: 𝟏. 𝐄𝐱𝐩𝐞𝐫𝐭𝐢𝐬𝐞 𝐚𝐧𝐝 𝐒𝐩𝐞𝐜𝐢𝐚𝐥𝐢𝐳𝐚𝐭𝐢𝐨𝐧: Managed IT services provide access to a team of seasoned IT professionals with the technical skills required for managing complex IT environments. 𝟐. 𝐂𝐨𝐬𝐭 𝐄𝐟𝐟𝐢𝐜𝐢𝐞𝐧𝐜𝐲: Managed services can help control IT costs, offering predictable pricing models and reducing the need for in-house IT staff. 𝟑. 𝐏𝐫𝐨𝐚𝐜𝐭𝐢𝐯𝐞 𝐒𝐮𝐩𝐩𝐨𝐫𝐭 𝐚𝐧𝐝 𝐌𝐚𝐢𝐧𝐭𝐞𝐧𝐚𝐧𝐜𝐞: MSPs offer continuous monitoring and proactive maintenance, ensuring systems are up-to-date and running efficiently. 𝟒. 𝐄𝐧𝐡𝐚𝐧𝐜𝐞𝐝 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲: With managed IT services, businesses benefit from robust cybersecurity standards and practices to protect against threats. 𝟓. 𝐒𝐜𝐚𝐥𝐚𝐛𝐢𝐥𝐢𝐭𝐲 𝐚𝐧𝐝 𝐅𝐥𝐞𝐱𝐢𝐛𝐢𝐥𝐢𝐭𝐲: Managed services allow businesses to scale their IT resources up or down as needed, providing flexibility to adapt to changing demands. 𝟔. 𝐒𝐭𝐫𝐚𝐭𝐞𝐠𝐢𝐜 𝐈𝐓 𝐏𝐥𝐚𝐧𝐧𝐢𝐧𝐠: MSPs assist with long-term IT strategy, ensuring that the IT infrastructure aligns with business goals. #itmanagement #techsolutions #digitaltransformation #costsavings #businessefficiency #proactivesupport #cybersecurity #scalability #expertiseondemand #itsecurity
To view or add a comment, sign in
-
-
Great post John Manganiello, we have these discussions on a daily basis. Accelerate Partners has the benefit of working with many security suppliers across many clients and frameworks. The trends and perspective is very educational to end users. Let's have a conversation. #cybersecurity #cyberstrategy #Layeredapproach #time2accelerate
‘Point solutions just need to die’: The end of the one-trick security tool” I could not agree with this statement more. My role is to partner with my clients to build a comprehensive information security program and strategy. The security solutions used are a means to end. I find IT decision makers get caught up with point solutions. It is like plugging a security solution into a hole in the boat, the challenge is there are too many holes. I am not saying do not use best in class solutions but firstly you need to understand how they fit into your security strategy. Back to Basics: I believe strongly in the basics such as patch management, identity and access management and a layered approach to security regarding prevention and detection tools and services. Education: Understanding zero trust platforms and how the vendors and service providers are evolving their solutions and offering is a must. SASE (Secure access service edge) model and the M365 feature set is a great place to start. 📢 Summary: Point solutions lead to solution sprawl and overlap. Simplify your approach, consolidate your security stack and drive a security strategy against a known framework such as NIST. Accelerate Partners, w/ (JP) John Panzica #technologyconsulting #cybersecurity https://lnkd.in/egkJdFQ6
‘Point solutions just need to die’: The end of the one-trick security tool
cybersecuritydive.com
To view or add a comment, sign in
-
The Vital Role of Enterprise Infrastructure Maintenance in Business Success In today's fast-paced digital landscape, maintaining robust enterprise infrastructure is not just essential but a strategic imperative for businesses. One critical aspect often overlooked is effective patch management and regular updates. Patch management might not always be in the limelight, but its significance cannot be overstated. It's the shield that protects your systems from vulnerabilities and cyber threats that evolve daily. Neglecting it exposes your business to unnecessary risks, potentially leading to data breaches, downtime, and compromised customer trust. Regular updates, on the other hand, are the lifeline of your infrastructure. They bring enhanced features, performance optimizations, and most crucially, security patches. By staying up to date, you're not just ensuring smooth operations but also fortifying your defenses against ever-evolving cyber threats. In a world where digital resilience is paramount, investing in robust patch management processes and adhering to regular updates isn't just prudent; it's a competitive advantage. It showcases your commitment to security, reliability, and staying ahead in a constantly evolving technological landscape. Let's prioritize the maintenance of our enterprise infrastructure, safeguarding our businesses, and fostering a secure digital environment for all stakeholders. #EnterpriseInfrastructure #PatchManagement #CyberSecurity #DigitalResilience #BusinessStrategy #TechUpdates
To view or add a comment, sign in
-
Head of Network Engineering (AVP1) at eProcess Ghana Limited || IT Operations || Cloud Computing architect || Cyber Security Enthusiast
CrowdStrike In Retrospect: Proactive Measures for Organizations Businesses worldwide depend on cybersecurity providers like CrowdStrike and other third-party solutions to safeguard their digital assets for endpoint security. As the complexity of cyber threats grows, understanding the role of endpoint security and the management of software updates becomes crucial. The CIA triad— Confidentiality, Integrity, and Availability —serves as a foundational framework for assessing the risk involved with these threats. Recent incidents have highlighted the vulnerability of "Availability," where systems become inaccessible without compromising data integrity or confidentiality. Such disruptions can severely impact business operations and customer trust. Take, for example, the 2020 SolarWinds breach, which is another cautionary tale. This major monitoring solution was compromised due to inadequate security measures. The incident underscored the risks inherent in centralized solutions and the necessity for robust security protocols. While software updates are essential for patching vulnerabilities, they also pose significant risks if not managed properly. A compromised update can introduce new vulnerabilities rather than fixing existing ones. To mitigate this risk, businesses are advised to delay the installation of updates briefly, allowing any potential issues to be identified and addressed. The suggestion of involving regulators or third-party entities to verify updates could enhance security across the board. This added layer of scrutiny can help ensure that updates are safe and effective before they reach end-users. Each cybersecurity incident offers valuable lessons and often leads to the establishment of new standards and practices. While no system can be entirely foolproof, increased diligence and real-time monitoring are critical components of a resilient cybersecurity strategy. As organizations continue to navigate the complexities of the digital landscape, the importance of robust cybersecurity measures cannot be overstated. By focusing on endpoint protection, managing updates wisely, and embracing regulatory oversight, organizations can better protect themselves against the ever-evolving cyber threats. The key lies in vigilance, preparedness, and a commitment to continuous improvement in cybersecurity practices. #Cybersecurity #CrowdStrike #Cyberrisks #Cyberriskmanagement _________ Image source: web search
To view or add a comment, sign in
-
-
Today's Window's Outage Affect: Today, CrowdStrike experienced a significant outage affecting its Windows-based systems, causing widespread disruption and concern among cybersecurity professionals. The outage, which started in the early hours, impacted numerous organizations relying on CrowdStrike’s endpoint protection and threat intelligence services. This incident underscores the critical importance of resilience and contingency planning in cybersecurity. Even industry-leading solutions like CrowdStrike can face unforeseen challenges, highlighting the necessity for businesses to implement robust backup strategies and multi-layered security approaches. CrowdStrike's swift response and transparency throughout the incident have been commendable. They promptly communicated with affected customers and worked diligently to restore services. This proactive approach is a testament to their commitment to customer trust and service reliability. As the cybersecurity landscape evolves, this event serves as a crucial reminder for all organizations to regularly review and update their security protocols. Ensuring that your business can withstand and quickly recover from such disruptions is vital. Let's use this moment to reflect on our own preparedness and make necessary improvements. Cybersecurity is a shared responsibility, and learning from such incidents strengthens our collective defense against ever-evolving threats. #CyberSecurity #CrowdStrike #Resilience #BusinessContinuity
To view or add a comment, sign in
-
-
𝐌𝐚𝐢𝐧 𝐛𝐞𝐧𝐞𝐟𝐢𝐭𝐬 𝐨𝐟 𝐦𝐚𝐧𝐚𝐠𝐞𝐝 𝐈𝐓 𝐬𝐞𝐫𝐯𝐢𝐜𝐞𝐬: 𝟏. 𝐄𝐱𝐩𝐞𝐫𝐭𝐢𝐬𝐞 𝐚𝐧𝐝 𝐒𝐩𝐞𝐜𝐢𝐚𝐥𝐢𝐳𝐚𝐭𝐢𝐨𝐧: Managed IT services provide access to a team of seasoned IT professionals with the technical skills required for managing complex IT environments. 𝟐. 𝐂𝐨𝐬𝐭 𝐄𝐟𝐟𝐢𝐜𝐢𝐞𝐧𝐜𝐲: Managed services can help control IT costs, offering predictable pricing models and reducing the need for in-house IT staff. 𝟑. 𝐏𝐫𝐨𝐚𝐜𝐭𝐢𝐯𝐞 𝐒𝐮𝐩𝐩𝐨𝐫𝐭 𝐚𝐧𝐝 𝐌𝐚𝐢𝐧𝐭𝐞𝐧𝐚𝐧𝐜𝐞: MSPs offer continuous monitoring and proactive maintenance, ensuring systems are up-to-date and running efficiently. 𝟒. 𝐄𝐧𝐡𝐚𝐧𝐜𝐞𝐝 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲: With managed IT services, businesses benefit from robust cybersecurity standards and practices to protect against threats. 𝟓. 𝐒𝐜𝐚𝐥𝐚𝐛𝐢𝐥𝐢𝐭𝐲 𝐚𝐧𝐝 𝐅𝐥𝐞𝐱𝐢𝐛𝐢𝐥𝐢𝐭𝐲: Managed services allow businesses to scale their IT resources up or down as needed, providing flexibility to adapt to changing demands. 𝟔. 𝐒𝐭𝐫𝐚𝐭𝐞𝐠𝐢𝐜 𝐈𝐓 𝐏𝐥𝐚𝐧𝐧𝐢𝐧𝐠: MSPs assist with long-term IT strategy, ensuring that the IT infrastructure aligns with business goals. #itmanagement #techsolutions #digitaltransformation #costsavings #businessefficiency #proactivesupport #cybersecurity #scalability #expertiseondemand #itsecurity
To view or add a comment, sign in
-