Commvault and GigaOm were able to pinpoint five key capabilities, also called resiliency markers, that when deployed together, helped companies recover faster from cyberattacks and experience fewer breaches compared to companies that did not follow the same path.

These five resiliency markers emerged after data analysis teams combed through survey results across a range of topics including: how often companies were breached, what resilience technologies were (or were not) deployed, and how rapidly businesses were able to recover data and resume normal operations. The resiliency markers are as follows:

1. Security tools that enable early warning about risk, including insider risk.
2. A known-clean dark site or secondary system in place.
3. An isolated environment to store an immutable copy of the data.
4. Defined runbooks, roles, and processes for incident response.
5. Specific measures to show cyber recovery readiness and risk.

In assessing the results, only 13% of respondents were categorized as cyber mature. The survey yielded very interesting observations:

• Faster recoveries: Cyber mature organisations, those that have deployed at least four of the five resiliency markers, recovered 41% faster than respondents with only zero or one marker.
• Fewer breaches: Overall, cyber mature organisations report experiencing fewer breaches compared with companies that have less than four markers.
• Better confidence about cyber readiness: 54% of cyber mature organisations were completely confident in their ability to recover from a breach, compared to only 33% of less prepared organisations.
• Frequent testing makes a big difference: 70% of cyber mature organizations tested their recovery plans quarterly, compared to 43% of organisations with only zero or one maturity marker, that tested with this same frequency.

Supporting Quotes

“One of the key findings from the research is that in order to truly advance cyber preparedness, organisations can’t cut corners. We saw significant disparities in resilience between organisations that deployed one or two of the resiliency markers versus four or five,” said Chris Ray, Cybersecurity Analyst, GigaOm. “It’s critical that organisations think about resiliency in layers. Less than 85% of respondents surveyed do that today. This needs to rapidly change if companies want to be resilient and have the upper hand against bad actors.”

“As we drill down into these cyber capabilities, key practices are emerging as fundamentally critical to any cyber preparedness strategy, and testing for cyber recovery readiness is one of them,” said Tim Zonca, VP, Portfolio Marketing, Commvault. “Companies that just focus on testing for disaster recovery are missing the boat. Given the evolving nature of cyber threats, frequent and modern testing practices for cyber recovery are essential so environments are not re-infected and recovery processes are robust.”

Methodology

Commvault in conjunction with GigaOm conducted this inaugural study of 1,000 respondents across 11 countries in April 2024 to better understand their views on cyber readiness and how prepared their organizations are in the face of cyber threats. Respondents were from companies earning at least $10 million in annual revenues, with the majority earning $500 million or more. Thirty-five percent of respondents were board-level or C-Suite executives, 48% were senior-level management, and the remaining 17% were mid- or junior-level management. The 11 countries included in the survey are Australia, Canada, France, Germany, Italy, Japan, Netherlands, Spain, Sweden, United Kingdom, and United States.

About Commvault

Commvault (NASDAQ: CVLT) is the gold standard in cyber resilience, helping more than 100,000 organizations keep data safe and businesses resilient and moving forward. Today, Commvault offers the only cyber resilience platform that combines the best data security and rapid recovery at enterprise scale across any workload, anywhere—at the lowest TCO.