Summary
- Prevention is incomplete without tested identity controls, backups, isolation and restoration.
- A credible security record reports detection and recovery time, not only blocked attacks.
Cybersecurity spans people, devices, software, networks and data. Controls reduce probability, but no firewall or monitoring tool removes every path to failure. Organisations should therefore rehearse who can revoke access, segment a compromised system, restore clean data and communicate with affected users. Automation helps only when actions are bounded, logged and reversible. The next useful evidence is a timed recovery exercise that includes suppliers and expired software, because resilience is demonstrated after a control fails—not by the number of alerts it creates.
