CrowdStrike outage: Any quick advice for orgs affected? What immediate actions are your IT and other teams taking to mitigate the effects of the outage?
Sort by:
Practically there are MDM devices that can help recover systematically from those disruption, as opposed to having people visit each computer 1 by 1. This should be incorporated into your BRP and DRP plans. The more you can automatic and centralize the better your organizational resiliency.
I agree with all of the comments regarding Business Resumption plans - this caused us to really assess our BRPs from a horizontal perspective ... our BRPs were mostly put in place thinking from a vertical perspective.
On one hand, these are still "rare events". Companies have benefited for many years from the advantages of a remotely serviced and reliably working environment. So before taking rash actions, one shall assess the impact on a long-term basis.
On the other hand, a risk-blind "Cloud-First" paradigms of companies need to be severely revised to address those kinds of events. Nevertheless, not every company has the capability for a thorough risk-assessment needed.,Even when private companies have "just" lost a large amount of money, the impact on critical infrastructure has surprised me. Any kind of single point of failure situations must be severely assessed and mitigated.
While immediate mitigation is likely a simple steps, I highly advise having an appropriate strategy after remediation to prevent an outages like this one in the near future.
The most common thing I hear is stop allowing auto-updates from vendors, test yourself and implement in phases