Aunque las organizaciones puedan citar medidas específicas de ciberseguridad como prioridades, lo que realmente importa es cómo actúan. Esta fue una de las conclusiones clave de nuestro primerInforme de preparación para la cíber recuperación, en el que colaboramos con GigaOm para encuestar a 1.000 responsables de TI y seguridad de todo el mundo.
When analyzing the most resilient organizations, we found that they employed many measures, but five practices rose to the top when determining their true readiness. We call these practices maturity markers (see 5 Markers of Cyber Recovery Readiness, below).
Organizations demonstrating four or five markers are considered cyber mature. These companies report experiencing fewer breaches and recovering faster when they do get breached.
Sin embargo, nuestra encuesta reveló que solo el 4 % de las organizaciones ha implantado los cinco indicadores, y apenas el 13 % aplica al menos cuatro. En la parte inferior de la curva de madurez, el 14 % no cuenta con ningún indicador clave.
While fewer than half of all organizations feel confident in their recovery plans, more than half of cyber mature organizations (54%) feel substantially more confident in their ability to recover critical systems and data following a major incident.
5 indicadores de la Readiness para la recuperación cibernética
An organization’s level of cyber maturity can be measured by the presence of five markers. The most mature, cyber-ready organizations demonstrate four or five of these:
- Herramientas de seguridad que permiten la alerta temprana sobre riesgos, incluidos los riesgos internos.Â
Early warning security tools are technologies and systems designed to detect potential cyber threats before they can cause significant harm. These tools aim to identify risks at the earliest possible stage, allowing organizations to respond proactively rather than reactively. Examples include Intrusion Detection Systems, Deception Technology, Intrusion Prevention Systems, Security Information and Event Management, User and Entity Behavior Analytics, and Endpoint Detection and Response.
- Se dispone de un sitio oscuro o un sistema secundario del que se sabe que está libre de contaminación.  Â
Maintaining an isolated, pre-configured or dynamic isolated recovery environment (for example, a cleanroom) that remains unaffected by cyber incidents at the primary site. This secondary site can be quickly activated for business continuity and data integrity in the event of a cyber attack or major failure. It enhances cyber resiliency by providing a secure failover option, minimizing downtime and complexities of failover.
- Un entorno aislado en el que almacenar una copia inmutable de los datos.  Â
Involves maintaining a separate, air gapped (that is, immutable and indelible) copy of data secured behind a third party’s infrastructure. The data remains unchanged and protected from cyber threats, including ransomware and malicious insider actions. It enhances data integrity and availability, providing a reliable recovery option in case of data corruption or loss.
- Se han definido manuales de procedimientos, funciones y procesos para la respuesta ante incidentes.  Â
A crucial capability for cyber resilience for a structured and efficient response to cyber incidents. Tested runbooks provide step-by-step instructions for handling various types of incidents, reducing confusion and response time. Clearly defined roles and processes ensure that every team member knows their responsibilities, promoting coordinated efforts. This preparedness speeds up recovery and helps maintain operational continuity during and after cyber events.
- Medidas específicas para demostrar la Readiness para la recuperación cibernética y el riesgo.  Â
Metrics and tests that demonstrate an organization’s ability to recover from cyber incidents and assess associated risks. These measures, such as regular recovery drills and risk assessments, provide insight into the effectiveness of recovery plans and identify potential vulnerabilities. They are important for cyber resiliency in particular, as well as preparedness, validation of recovery strategies, and to highlight areas for improvement.
Descarga elInformecompleto para obtener más información sobre cómo tu organización puede estar mejor preparada ante una filtración de datos.
