Abstract

Unlike a typical outage recovery, cyber recovery can be far more complex, with getting systems back up being only part of the challenge. Teams may also be dealing with containment decisions, forensic requirements, uncertainty around what can actually be restored safely, and the business tradeoffs that come with rolling back to a known good point in time. This talk explores the ways cyber incidents complicate traditional IT disaster recovery and shares practical ways to modernize DR planning so it works hand in hand with incident response and supports better recovery decisions under pressure.