The Times Australia
The Times Technology News

.

Take These 3 Vital Steps To Ensure Business Continuity After An Attack

  • Written by David Lenz, Vice President, Asia Pacific at Arcserve



The outcome of a recent legal dispute between Australian company Inchcape and insurance provider Chubb is a stark reminder for companies to reconsider the role of insurance in addressing the growing threat of ransomware.

The Federal Court ruled that Chubb was not liable for recovery costs following a ransomware attack as they did not qualify as “Direct Financial Loss” in relation to the policy agreement, leaving Inchcape to shoulder the costs of clean-up and recovery following a ransomware attack.

Australian companies are increasingly exposed to the threat of a ransomware attack, which can be disastrous. According to Sophos, 80% of Australian organisations were hit with ransomware in 2021, up from 45% in 2020. The average cost to an Australian organisation is AU$250,000 per incident.

Cyber insurance can be a helpful safety net for businesses, but it is not a complete solution. The Inchcape and Chubb ruling demonstrates that insurance can’t guarantee coverage of all the monetary losses and recovery costs associated with an attack.

More importantly, it will not cover the loss of goodwill, damage to your brand image, and loss of customer loyalty after an attack. Instead of relying 100% on insurance, organisations should pursue these three strategies to safeguard their data and ensure the business can continue operating.

1: Have a sound recovery plan

Moving data to a cloud provider in itself is not a guarantee of the safety and security of your data. Last year, a fire at the data centre of French web hosting service OVHcloud caused the loss of massive amounts of customer data. It impacted government agencies, e-commerce companies, and banks, among others.

Backing up the organisation’s data to the cloud or on-premise is a critical and cost-effective first step in any disaster recovery plan. But it’s only the first step and needs to be complemented with a plan to quickly recover valuable data in an emergency. Testing their recovery plan often by simulating disruptions allows the organisation to see well their recovery plan works. Additionally, they should be regularly testing their backup images and fixing any problems.

2: Implement a backup and recovery solution

Cloud security is not solely the responsibility of your cloud provider. Cloud providers usually promise to secure their infrastructure and services but they will not guarantee the safety of your data. No matter what cloud platform you use, the data is still owned by the owner organisation, not the provider. Many cloud providers recommend that their customers use third-party software to protect their data.

Organisations can comprehensively secure their data with a reliable cloud backup and recovery solution. By implementing a cloud backup and recovery solution that automatically backs up the company’s information every 15 minutes and provides multiple points of recovery, organisations can better guarantee that their valuable data is continuously protected while having quick access and visibility to it 24/7.

3: Be proactive: be data resilient

Companies need to practise data resilience by having a recovery plan and testing it often. A data resilience strategy ensures business continuity in the event of a disruption. It is built on recovery point objectives (RPOs) and recovery time objectives (RTOs), and organisations should regularly test to guarantee that the RPOs and RTOs can be achieved.

RPO determines backup frequency, and in essence, measures the company’s tolerance for data loss. Some organisations can tolerate a data loss of 24 hours, so they back up their data every 24 hours. Their RPO is 24. Other organisations, such as those in finance and healthcare, absolutely cannot tolerate a data loss of 24 hours. Their RPOs are set to milliseconds.

The RTO measures the downtime an organization can accept between a data loss and recovery. It’s how long they can be down before the business incurs severe damages. The RTO determines the company’s disaster recovery plan investment. If their RTO is one hour, they need to invest in solutions that get them back up and running within an hour.

Establishing your RPO and RTO and then implementing the solutions needed to achieve them are the keys to data resilience.

We live in a world of growing cybersecurity threats, more frequent natural disasters, and black swan events arriving in flocks. Organisations purchasing cyber insurance need to realise that this type of insurance alone does not constitute a data protection plan. It is best viewed as a complement to their backup and recovery efforts. Never consider it a replacement.

Times Magazine

Headless CMS in Digital Twins and 3D Product Experiences

Image by freepik As the metaverse becomes more advanced and accessible, it's clear that multiple sectors will use digital twins and 3D product experiences to visualize, connect, and streamline efforts better. A digital twin is a virtual replica of ...

The Decline of Hyper-Casual: How Mid-Core Mobile Games Took Over in 2025

In recent years, the mobile gaming landscape has undergone a significant transformation, with mid-core mobile games emerging as the dominant force in app stores by 2025. This shift is underpinned by changing user habits and evolving monetization tr...

Understanding ITIL 4 and PRINCE2 Project Management Synergy

Key Highlights ITIL 4 focuses on IT service management, emphasising continual improvement and value creation through modern digital transformation approaches. PRINCE2 project management supports systematic planning and execution of projects wit...

What AI Adoption Means for the Future of Workplace Risk Management

Image by freepik As industrial operations become more complex and fast-paced, the risks faced by workers and employers alike continue to grow. Traditional safety models—reliant on manual oversight, reactive investigations, and standardised checklist...

From Beach Bops to Alpine Anthems: Your Sonos Survival Guide for a Long Weekend Escape

Alright, fellow adventurers and relaxation enthusiasts! So, you've packed your bags, charged your devices, and mentally prepared for that glorious King's Birthday long weekend. But hold on, are you really ready? Because a true long weekend warrior kn...

Effective Commercial Pest Control Solutions for a Safer Workplace

Keeping a workplace clean, safe, and free from pests is essential for maintaining productivity, protecting employee health, and upholding a company's reputation. Pests pose health risks, can cause structural damage, and can lead to serious legal an...

The Times Features

Duke of Dural to Get Rooftop Bar as New Owners Invest in Venue Upgrade

The Duke of Dural, in Sydney’s north-west, is set for a major uplift under new ownership, following its acquisition by hospitality group Good Beer Company this week. Led by resp...

Prefab’s Second Life: Why Australia’s Backyard Boom Needs a Circular Makeover

The humble granny flat is being reimagined not just as a fix for housing shortages, but as a cornerstone of circular, factory-built architecture. But are our systems ready to s...

Melbourne’s Burglary Boom: Break-Ins Surge Nearly 25%

Victorian homeowners are being warned to act now, as rising break-ins and falling arrest rates paint a worrying picture for suburban safety. Melbourne residents are facing an ...

Exploring the Curriculum at a Modern Junior School in Melbourne

Key Highlights The curriculum at junior schools emphasises whole-person development, catering to children’s physical, emotional, and intellectual needs. It ensures early year...

Distressed by all the bad news? Here’s how to stay informed but still look after yourself

If you’re feeling like the news is particularly bad at the moment, you’re not alone. But many of us can’t look away – and don’t want to. Engaging with news can help us make ...

The Role of Your GP in Creating a Chronic Disease Management Plan That Works

Living with a long-term condition, whether that is diabetes, asthma, arthritis or heart disease, means making hundreds of small decisions every day. You plan your diet against m...