Peer-Driven Insights

Resilience

Active Ambassadors in This Topic

Rathik Pathak

JM Financial Services Ltd

Travel and Hospitality, 1k - 5k

View All Community Ambassadors

Community Posts

Have you ever been the victim of a ransomware attack?

Yes, I personally have fallen victim.10%

Yes, my company has fallen victim.54%

No, but this is a real concern for me.32%

No, and I'm not concerned.3%

View Results

We’re currently exploring options to implement an iPXE-based WinPE deployment solution in Microsoft Azure. Our goal is to streamline OS provisioning for virtual machines using cloud-hosted boot scripts and WinPE images, ideally over HTTP/S for performance and flexibility. Key requirements: Must support iPXE booting in Azure (via ISO, custom VM image, or chainloading). Ability to host and serve WinPE images securely (e.g., via Azure Blob Storage or web server). Cyber Essentials Plus compliance is essential, as we operate in a regulated environment. Preferably a UK-based provider with experience in secure cloud deployments and endpoint provisioning. We’ve looked into solutions like 2Pint Software’s iPXE Anywhere, but we’re open to other vendors or managed service providers who can assist with setup, integration, and ongoing support. Has anyone implemented a similar solution or worked with a provider who meets this criteria? Any recommendations or lessons learned would be greatly appreciated.

How have others approached building IT Disaster Recovery from a low maturity starting point?

How did you prioritise what to tackle first?

Did you establish a dedicated DR/resilience role, or spread responsibility across existing teams?

Has anyone created a resiliency model for application teams to follow as they build out their applications in the cloud? If so can you share any details?

Looking for vendors for a basic alerting system for business continuity events. SMS preferred, but mobile apps also welcome.

Read More Comments

What's a quick win for optimizing spend? What's been your focus or "lowest hanging fruit"?

Read More Comments

Which digital contract lifecycle management tool is your organization leveraging?

Agiloft7%

Conga22%

DocuSign CLM (SpringCM)39%

Apttus5%

Ironclad3%

Coupa (Exari)4%

Other (discuss below)16%

View Results

Enterprise, SME Data backups

Rubrik16%

Cohesity18%

Commvault24%

DELL EMC29%

HP6%

IBM4%

View Results

What is the most interesting/helpful/unique tool you're using right now that no one is talking about?

Read More Comments

I am seeking individuals at Healthcare IT organizations who have established IT business continuity practices in place and are willing to have a discussion to describe what policies and procedures are in place at your organization, challenges getting there, as well as Q&A. I am not referring to Disaster Recovery procedures, rather how IT continues to run itself when its own departmental services are down, e.g. email, ticket tracking, change control, conference bridge, etc..

Read More Comments

I'm interested in learning how other large enterprises are planning and approaching data backup, recovery, data loss, ransomware protection for Data Cloud Platforms such as Snowflake. * Are you using native capabilities? * Have you deployed additional 3rd party platforms? If so, which ones? Thanks in advance for your inputs and insights.

How do you approach designing a scalable and resilient technology architecture? Are there any guiding principles you follow?

Read More Comments

What indicators would suggest to you that an architecture is too complex and not resilient enough to bounce back from a failure?

Read More Comments

How are you increasing your organization’s cyber resiliency? What are you currently targeting for improvement?

Read More Comments

What challenges have you faced in migrating to a cloud-native solution? How are you maintaining resiliency and high availability of the system?

I was looking at a client's DNS configurations for MX records and noticed that they have just one entry: smtp.google.com At first I thought this was a mistake, but apparently after April 2023 this is now the recommended setting. One record with a "weight" of "1." I've been managing and configuring SMTP services and DNS records for 30+ years and I've always believed (and seen the belief reinforced over time) that DNS is a SPoF (Single Point of Failure) for many organizations. The most impressive outage of the last few years was in October 2021 when folks at Facebook instantly took down Facebook, Instagram and WhatsApp with one mistaken BGP configuration change. Question: Why would Google have put all of their DNS eggs in one basket? Meaning, all of their DNS services behind smtp.google.com (in IPv4 at least) seem to live within one ASN: 15169 with over 11 million IP addresses. They seem exposed to a BGP outage and/or BGP hijacking attack with this setup.

References: Google Workspace MX record values 9 & MxToolbox (asn:15169)

Read More Comments