Close Menu
  • Home
  • Managing resilience
    • AI resilience
    • Business continuity
    • Business resilience
    • Climate resilience
    • C-suite and the board
    • DORA – the EU Digital Operational Resilience Act
    • Operational resilience
    • Organizational resilience
    • Supply chain resilience
    • Technology
  • Risk
    • Enterprise risk management
    • Operational risk
    • Threatscape
  • Cyber resilience
    • Cyber resilience updates
    • DORA – the EU Digital Operational Resilience Act
    • Product updates
More items
  • All News
  • Research
  • Jobs in Resilience
  • Resilience Resources
  • About Resilience Forward
X (Twitter) LinkedIn
  • Home
  • Managing resilience
    • AI resilience
    • Business continuity
    • Business resilience
    • Climate resilience
    • C-suite and the board
    • DORA – the EU Digital Operational Resilience Act
    • Operational resilience
    • Organizational resilience
    • Supply chain resilience
    • Technology
  • Risk
    • Enterprise risk management
    • Operational risk
    • Threatscape
  • Cyber resilience
    • Cyber resilience updates
    • DORA – the EU Digital Operational Resilience Act
    • Product updates
Login
LinkedIn Bluesky
Resilience Forward
Subscribe Now
  • All News
  • Research
  • Jobs in Resilience
  • Resilience Resources
  • About Resilience Forward
Resilience Forward
You are at:Home»Feature»Nine principles to improve cloud resilience
Feature

Nine principles to improve cloud resilience

Organizations must deploy nine principles to maximize the resilience of cloud environments, according to Gartner, Inc.
November 24, 20233 Mins Read
Cloud computing concept - an interdependent cloud is positioned overa map of the world with data moving backwards and forwards.

Issues impacting cloud availability and performance

As a starting point to improving cloud resilience Gartner says that infrastructure and operations (I&O) teams needs to understand the characteristics and common causes of cloud outages. They include that most failures are partial, they tend to be intermittent or involve performance degradation where they are less immediately noticeable, and resilience differences exist between the services cloud providers offer.

The cloud is not magically resilient and software bugs, not physical failures, cause almost all cloud outages. In the cloud, outages almost never involve the entire cloud provider, nor are service outages likely to be total. Instead, partial failures, degradations of service, individual service problems or local problems are typical. Resilience is not a binary state. No one can claim absolute resilience — not you, and not any cloud provider. Clouds should be as or even more resilient than on-premises infrastructure, but only if the I&O team uses them in a resilient manner.

Chris Saunderson, Sr Director Analyst at Gartner

Gartner analysts recommend that I&O leaders focus on the following nine key principles to improve cloud resilience.

Nine principles to improve resilience of cloud applications
Nine principles to improve resilience of cloud applications. Source: Gartner (November 2023)

Business Alignment: align resilience requirements to business needs. Without this alignment on requirements, teams will fall short of resilience expectations or will overspend. 

Risk-Based Approach: take a risk-based approach to resiliency planning that extends beyond catastrophic events. Put more emphasis on the more common failures that organizations have greater control to mitigate.

Dependency Mapping: build dependency graphs that map all middleware components, databases, cloud services and integration points so they can be architected and configured for resilience and included in both reliability and disaster recovery (DR) planning.

Continuous Availability: the continuous availability approach focuses on keeping applications, services and data available at all times and service levels with no downtime and limited impact during a failure event.

Resilient-By-Design: the application itself should be resilient by design. Infrastructure resilience alone is insufficient to deliver the zero-downtime services that end users expect.

DR Automation: implementing fully (or near fully) automated disaster recovery (DR) — either through the organization’s own tools or through third-party cloud-native DR tools — provides the foundation needed to meet aggressive recovery time objectives (RTOs) and allows DR to be routinely tested.

Resilience Standards: adopt resilience standards beyond architecture and DR. Resilient systems require teams to focus on quality, automation and continuous improvement, and infuse quality throughout the life cycle of an application.

Favour Cloud-Native Solutions: cloud providers have a significant range of solutions that can be used to improve resilience. Where viable, I&O leaders should take advantage of these solutions rather than trying to invent their own alternatives and adding even more complexity.

Business Functions Focus: rather than restricting thinking to only ‘failing over’ like-for-like, explore alternatives, such as lightweight IT alternatives or lightweight application substitutions that provide the bare minimum business-critical functionality required.


Gartner clients can read more in 9 Principles for Improving Cloud Resilience

North America
Share. Facebook Twitter Pinterest LinkedIn Tumblr Email WhatsApp
Previous Article2023 Global Risk Survey shows that cyber and digital technology risks are top concerns
Next Article How will high availability develop in 2024?

Related Posts

A solar farm with associated wind turbines.

The resilience challenges of the renewable energy transition

October 2, 2026
Sovereign cloud concept - a digital map of the world is overlaid with multiple cloud icons of different sizes.

Sovereignty and resilience: considerations for organizational leaders

October 2, 2026
A medical worker in a hazmat suit responds to a pandemic victim.

UN pandemic meeting renews preparedness calls but fails to agree declaration

October 1, 2026
Cloned website images overlaid with phishing icons.

Organizational impersonation ranks as top online IP concern: with significant business impacts

October 1, 2026
AI resilience concept.

Survey highlights measures that organizations are considering for improved AI resilience

October 1, 2026
Fragility concept - a human head made up of jigsaw pieces starts to dissolve.

AI efficiency gains can increase organizational fragility

October 1, 2026
Advertisement
Resilience First
This week's most read articles
Open lorry car trunk full of moving cardboard boxes and furniture outdoors at city street.

HP Wolf study finds growing concern about attacks on hardware supply chains

August 6, 2024
A solar farm with associated wind turbines.

The resilience challenges of the renewable energy transition

October 2, 2026
Five stage crisis management framework

A five stage framework for a crisis management process

April 2, 2025
Latest resources
DRJ and BCI logos

DRJ and BCI publish guidance for governing, managing, and using AI in resilience

September 7, 2026
Load More

Subscribe to Updates

Get our Resilience Updates newsletter.

Most Popular Feature Articles
Three dark coloured light bulbs on a black background illustrate the concept of The Dark Triad in Crisis Management.

The Dark Triad in crisis management

Five stage crisis management framework

A five stage framework for a crisis management process

Blue interconnected gears and network nodes symbolizing automation and complex machinery.

Agent zero – the 2028 digital pandemic

Latest Reports
Global risks concept

UN report warns that the global risk landscape is being redrawn

Three blank wooden signs against a blue sky.

System restoration is not business continuity: research finds that ‘most cyber recovery plans are built for the wrong outcome’

BCI Continuity and Resilience Report 2026 cover.

BCI report sees growing structural divide between business continuity and resilience

A promo box for an article about resilience governance.
© 2026 Resilience Forward
  • About Resilience Forward
  • Newsletter
  • Newsfeed
  • Advertise
  • Call for Papers
  • Contact
  • Privacy Policy and Cookie Use
  • AI Use Policy

Type above and press Enter to search. Press Esc to cancel.

Manage Cookie Consent
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behaviour or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
  • Manage options
  • Manage services
  • Manage {vendor_count} vendors
  • Read more about these purposes
View preferences
  • {title}
  • {title}
  • {title}
Manage Cookie Consent
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behaviour or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
  • Manage options
  • Manage services
  • Manage {vendor_count} vendors
  • Read more about these purposes
View preferences
  • {title}
  • {title}
  • {title}
Ad Blocker Enabled!
Ad Blocker Enabled!
Our website is made possible by displaying online advertisements to our visitors. Please support us by disabling your Ad Blocker.

Sign In or Register

Welcome Back!

Login to your account below.

Lost password?