Close Menu
  • Home
  • Managing resilience
    • AI resilience
    • Business continuity
    • Business resilience
    • Climate resilience
    • C-suite and the board
    • DORA – the EU Digital Operational Resilience Act
    • Operational resilience
    • Organizational resilience
    • Supply chain resilience
    • Technology
  • Risk
    • Enterprise risk management
    • Operational risk
    • Threatscape
  • Cyber resilience
    • Cyber resilience updates
    • DORA – the EU Digital Operational Resilience Act
    • Product updates
More items
  • All News
  • Research
  • Jobs in Resilience
  • Resilience Resources
  • About Resilience Forward
X (Twitter) LinkedIn
  • Home
  • Managing resilience
    • AI resilience
    • Business continuity
    • Business resilience
    • Climate resilience
    • C-suite and the board
    • DORA – the EU Digital Operational Resilience Act
    • Operational resilience
    • Organizational resilience
    • Supply chain resilience
    • Technology
  • Risk
    • Enterprise risk management
    • Operational risk
    • Threatscape
  • Cyber resilience
    • Cyber resilience updates
    • DORA – the EU Digital Operational Resilience Act
    • Product updates
Login
LinkedIn Bluesky
Resilience Forward
Subscribe Now
  • All News
  • Research
  • Jobs in Resilience
  • Resilience Resources
  • About Resilience Forward
Resilience Forward
You are at:Home»Managing resilience»Technology»The Data Resilience Maturity Model – a new strategic framework to help organizations improve their data resilience (Page 40)
Technology

The Data Resilience Maturity Model – a new strategic framework to help organizations improve their data resilience

April 23, 20252 Mins Read
The DRMM

A new Data Resilience Maturity Model (DRMM) provides an empirical framework for organizations to assess their current resilience posture, identify gaps, and implement targeted improvements. Veeam developed the DRMM in collaboration with McKinsey, and supported by insights from George Westerman, MIT; Palo Alto Networks; and Splunk. It is also informed by insights from a survey of over 500 C-level executives.

The Data Resilience Maturity Model is designed to assess an organization’s ability to ensure data resilience across three core dimensions:

Strategy: Aligning Business and Risk

A clear data strategy integrates business goals with resilience planning, ensuring organizations can anticipate threats, enforce governance, and maintain compliance.

People & Process: Empowering Resilience Through Alignment and Action

True resilience is driven by empowered teams and standardized execution.

Technology: The Backbone of Ensuring Resilience

Technology supports resilience across these key areas:

  • Backup: Secure protection of data that’s located on premises or across clouds.
  • Recovery: Agile restoration of critical systems, even at scale.
  • Architecture & Portability: Scalability across heterogeneous and often hybrid environments.
  • Security: Prevention and anticipated remediation against cyberthreats.
  • Reporting & Intelligence: Real-time visibility and insights to support compliance, improve recovery, and optimize operations.

The DRMM considers the above dimensions and categorizes organizations across four data resilience maturity horizons:

  • Basic: Reactive and manual, highly exposed
  • Intermediate: Reliable but fragmented, lacking automation
  • Advanced: Strategic and proactive, yet missing full integration
  • Best-in-Class: Autonomous, AI-optimized, fully resilient.

Joint research conducted by Veeam and McKinsey to support the DRMM launch reveals that organizations at the highest maturity level (the Best-in-Class horizon) recover from outages seven times faster, experience three times less downtime, and suffer four times less data loss than their peers.

74% of surveyed organizations fall into the Basic and Intermediate levels, with only 8% seen as being Best-in-Class.

Data resilience is critical to survival—and most companies are operating in the dark. The new Veeam DRMM is more than just a model; it’s a wake-up call that equips leaders with the tools and insights necessary to transform wishful thinking into actionable, radical resilience, enabling them to start protecting their data with the same urgency as they protect their revenue, employees, customers, and brand.

Anand Eswaran, CEO of Veeam
Obtain the DRMM

Africa Asia Asia Pacific Australasia Europe Middle East North America UK
Share. Facebook Twitter Pinterest LinkedIn Tumblr Email WhatsApp
Previous ArticleA whole-of-society approach to urban resilience: and how ISO 22371 can help
Next Article CSA State of SaaS Security Report 2025 highlights the difficulty of controlling this area

Related Posts

A group of rabbits happily graze while a wolf watches, hidden in the bushes behind them.

Confidence in resilience is outpacing reality, according to new report

November 13, 2026
An upward trending arrow.

Organizations are being forced to rethink resilience strategies, finds State of IT Infrastructure Resilience study

November 13, 2026
Error page: 'This site can't be reached' message from a browser, indicating connection closed and suggesting checks (reload button visible).

Microsoft outage demonstrates the realities of concentration risks

November 13, 2026
The numbers 2027 with the 0 replaced with an AI symbol.

From hype to control: AI security, risk management, and governance in 2027

November 13, 2026
Geopolitical risks

Geopolitical conflict is increasingly reshaping how organizations manage people, operations, and risk

November 9, 2026
Abstract network of interconnected nodes and lines in blue.

Everbridge publishes its 2027 Global Risk & Resilience Outlook

November 9, 2026
Advertisement
Resilience First
This week's most read articles
AI agent in action concept.

Lack of clear activity baselines makes it harder to manage AI agent resilience and security

November 9, 2026
Error page: 'This site can't be reached' message from a browser, indicating connection closed and suggesting checks (reload button visible).

Microsoft outage demonstrates the realities of concentration risks

November 13, 2026
Two different jigsaw pieces.

KPMG Risk & Resilience Survey finds that half of organizations have yet to integrate risk and resilience management

March 12, 2025
Latest resources
UNDRR Resilience Maturity Assessment ReMA tool

UNDRR launches new Resilience Maturity Assessment (ReMA) tool

June 27, 2025
Load More

Subscribe to Updates

Get our Resilience Updates newsletter.

Most Popular Feature Articles
Five stage crisis management framework

A five stage framework for a crisis management process

Three dark coloured light bulbs on a black background illustrate the concept of The Dark Triad in Crisis Management.

The Dark Triad in crisis management

Blue interconnected gears and network nodes symbolizing automation and complex machinery.

Agent zero – the 2028 digital pandemic

Latest Reports
An AI agent icon lying on its side with eyes shut showing the concept of a deactivated agent.

New report reveals major operational resilience gaps in agentic AI adoption

Two hands form a rectangular frame around the sun in a bright sky over distant mountains.

BCI Future of Resilience Report points to a more strategic future for resilience

Global risks concept

UN report warns that the global risk landscape is being redrawn

A promo box for an article about resilience governance.
© 2026 Resilience Forward
  • About Resilience Forward
  • Newsletter
  • Newsfeed
  • Advertise
  • Call for Papers
  • Contact
  • Privacy Policy and Cookie Use
  • AI Use Policy

Type above and press Enter to search. Press Esc to cancel.

Manage Cookie Consent
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behaviour or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
  • Manage options
  • Manage services
  • Manage {vendor_count} vendors
  • Read more about these purposes
View preferences
  • {title}
  • {title}
  • {title}
Manage Cookie Consent
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behaviour or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
  • Manage options
  • Manage services
  • Manage {vendor_count} vendors
  • Read more about these purposes
View preferences
  • {title}
  • {title}
  • {title}
Ad Blocker Enabled!
Ad Blocker Enabled!
Our website is made possible by displaying online advertisements to our visitors. Please support us by disabling your Ad Blocker.

Sign In or Register

Welcome Back!

Login to your account below.

Lost password?