Commvault has released new insights from its 2024 Cyber Recovery Readiness Report. This global survey of 1,000 security and IT professionals across 11 countries, reveals interesting behaviour changes for organizations that have been breached versus those that have not.
The Commvault survey, done in collaboration with GigaOm, shows that organizations that have endured cyber incidents in the past don’t want to get burned again. Consequently, they often reassess and invest in cyber resilience and recovery strategies in very meaningful ways. According to the survey:
- Investments in cyber resilience increase: organizations that have been breached spend nearly 30% more on cybersecurity measures than those that haven’t.
- More attention is given to understanding data risk profiles: previously breached organizations are nearly 2.5 times more likely to prioritise understanding their data risk profiles, which highlight data types and relative levels of risk.
- Cyber readiness testing is prioritised: previously breached organizations conduct more testing to find gaps in their cyber preparedness plans. 20 percent of organizations that haven’t been breached do not test their recovery plan at all, that number drops to just 2% for organizations that have been breached.
The impact of these added investments and focus on cyber resilience is significant. According to the survey, previously breached organizations that have invested in comprehensive cyber recovery plans recover 41% faster than their less-prepared counterparts. In terms of specific recovery times, previously breached organizations state that they are 32% more likely to recover within 48 hours compared to those that have not been breached – a much better outcome than the recovery times noted by other respondents, which could be three weeks or more. This reduced downtime can translate to significant savings, both in terms of direct financial losses and the preservation of customer trust and brand reputation.
“We’ve all heard the expression hindsight is 20/20, and that could not be more applicable when it comes to the findings of this survey,” said Brian Brockway, Chief Technology Officer at Commvault. “Our survey shows that the most resilient organizations are those that continuously test and refine their recovery strategies, learning from each incident to strengthen their defences. It’s this proactive mindset, rather than reactive spending, that makes the difference.”
