Less is more
One of the most fundamental principles of cyber security is to reduce the attack...

Years ago, when business continuity plans were formulated the risks that needed to be controlled were high in impact but low in frequency or likelihood. We sought out the best way to ensure we had reliable provision of power, and protection against fire, earthquake, and flood. Does the B really stand for Business or were we only dealing with events of Biblical proportions?
Resilience is typically defined as the capacity to recover from difficult life events. However then and now we do have to determine the minimum business continuity objective (MBCO). What? In other words what must absolutely run so that we can continue to do business in a meaningful way. Important “recovery” metrics also need to be established such as RPO ¹ and RTO². But here is the thing what if we cannot afford a 4-hour break in our operations? What if you are a retailer that makes more than 50% of its revenue during special holidays such as Valentine’s day? In the context of your business activities 4 hours could be an equivalent to 6 months loss in revenue when compared to another industry sector. As we leverage the speed of transaction and customer focus made possible by digitalization, we can see that a recovery only strategy is not appropriate for today’s business requirements.
Finally, the technology in place whether it be cloud or some mixture thereof the mode of deployment and the architectural dependencies will be a major factor on how robust and thus resilient your business operations are. Over 2000 years ago Vitruvius ³ defined the type of architecture that I fully agree with:
If digitalization is really people centric, I believe this is the way to build resilient solutions.
¹ RPO = recovery point objective (how often are your backups?)
² RTO = recover time objective (how soon can you restore?)
³ https://www.idesign.wiki/tag/principles-of-good-architecture/
Tags :
One of the most fundamental principles of cyber security is to reduce the attack...
“Zero Trust”. This sounds harsh at a time when it is important to us...
As very young child to my astonishment I learnt that adults do not always...