Preparation is better than cure. Why cyber resilience and recovery go hand in hand.
In the World Economic Forum’s latest report on global risks, ‘widespread cybercrime and cyber insecurity’ is the only technological risk to make the top ten – over both the short (two years) and long (10 years) term. In fact, no other technological risks currently make it onto the shortlist.
This makes cyber resilience and recovery for Australian businesses and organisations a board-level priority, not a box-ticking exercise.
We believe that preparation is better than cure. It’s only by toughing up your cyber defences and mitigating risk before disaster strikes that you will have a significant advantage when it comes to your ability to recover and restore your systems afterwards.
The top threat to your business. Deceptive links comprised 35.6% of threats, making them the #1 email threat category. 
The runner-up top threat. 30% of detected threats featured newly registered domains. 
No one is safe, no one is special. ‘85% of organisations suffered at least one cyberattack in the preceding twelve months [2022]; an increase from 76% experienced in the prior year.’ 
You can’t trust anyone – ever. Together, trusted brand impersonation, identity deception, and BEC (business email compromise) make up the third most prevalent email threat category. 
Email authentication isn’t all it’s cracked up to be. ‘Email authentication doesn’t stop threats. The majority (89%) of unwanted messages “passed” SPF, DKIM, or DMARC checks.’ 
Backup repositories are fair game. ‘Cyber villains were able to affect the backup repositories in 75% of attacks.’ 39% were rendered unusable, resulting in 29% of restores not being viable. 
Recovery to BAU is slow. After triage, allow 3.3 weeks for the average recovery journey (per attack). 
