{"id":522604,"date":"2024-08-01T09:00:00","date_gmt":"2024-08-01T13:00:00","guid":{"rendered":"https:\/\/www.commvault.com\/?p=522604"},"modified":"2024-08-01T08:32:56","modified_gmt":"2024-08-01T12:32:56","slug":"5-markers-of-cyber-maturity","status":"publish","type":"post","link":"https:\/\/www.commvault.com\/blogs\/5-markers-of-cyber-maturity","title":{"rendered":"5 Markers of Cyber Maturity\u202f"},"content":{"rendered":"\n<p class=\"\">While organizations may cite specific cyber security measures as priorities, it\u2019s how they behave that truly matters. This was a key insight found in our inaugural <a href=\"https:\/\/www.commvault.com\/gc\/cyber-recovery-readiness-report\">Cyber Recovery Readiness Report<\/a>, in which we partnered with GigaOm to survey 1,000 global IT and security leaders.<\/p>\n\n\n\n<p class=\"\">When analyzing the most resilient organizations, we found that they employed many measures, but five practices rose to the top when determining their true readiness. We call these practices maturity markers (see 5 Markers of Cyber Recovery Readiness, below).&nbsp;<\/p>\n\n\n\n<p class=\"\">Organizations demonstrating four or five markers are considered cyber mature. These companies report experiencing fewer breaches and recovering faster when they do get breached.&nbsp;<\/p>\n\n\n\n<p class=\"\">However, our survey found that only 4% of organizations have deployed all five markers, and just 13% practice at least four. At the bottom of the maturity curve, 14% have no key markers in place at all.<\/p>\n\n\n\n<p class=\"\">While fewer than half of all organizations feel confident in their recovery plans, more than half of cyber mature organizations (54%) feel substantially more confident in their ability to recover critical systems and data following a major incident.&nbsp;<\/p>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"h-5-markers-of-cyber-recovery-readiness\">5 Markers of Cyber Recovery Readiness<\/h4>\n\n\n\n<p class=\"\">An organization\u2019s level of cyber maturity can be measured by the presence of five markers. The most mature, cyber-ready organizations demonstrate four or five of these:&nbsp;&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"\"><strong>Security tools to enable early warning about risk, including insider risk.\u00a0<\/strong><\/li>\n<\/ul>\n\n\n\n<p class=\"\">Early warning security tools are technologies and systems designed to detect potential cyber threats before they can cause significant harm. These tools aim to identify risks at the earliest possible stage, allowing organizations to respond proactively rather than reactively. Examples include Intrusion Detection Systems, Deception Technology, Intrusion Prevention Systems, Security Information and Event Management, User and Entity Behavior Analytics, and Endpoint Detection and Response.&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"\"><strong>A known-clean dark site or secondary system in place.\u00a0\u00a0\u00a0<\/strong><\/li>\n<\/ul>\n\n\n\n<p class=\"\">Maintaining an isolated, pre-configured or dynamic isolated recovery environment (for example, a cleanroom) that remains unaffected by cyber incidents at the primary site. This secondary site can be quickly activated for business continuity and data integrity in the event of a cyber attack or major failure. It enhances cyber resiliency by providing a secure failover option, minimizing downtime and complexities of failover.&nbsp;&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"\"><strong>An isolated environment to store an immutable copy of the data.\u00a0\u00a0\u00a0<\/strong><\/li>\n<\/ul>\n\n\n\n<p class=\"\">Involves maintaining a separate, air gapped (that is, immutable and indelible) copy of data secured behind a third party\u2019s infrastructure. The data remains unchanged and protected from cyber threats, including ransomware and malicious insider actions. It enhances data integrity and availability, providing a reliable recovery option in case of data corruption or loss.&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"\"><strong>Defined runbooks, roles, and processes for incident response.\u00a0\u00a0\u00a0<\/strong><\/li>\n<\/ul>\n\n\n\n<p class=\"\">A crucial capability for cyber resilience for a structured and efficient response to cyber incidents. Tested runbooks provide step-by-step instructions for handling various types of incidents, reducing confusion and response time. Clearly defined roles and processes ensure that every team member knows their responsibilities, promoting coordinated efforts. This preparedness speeds up recovery and helps maintain operational continuity during and after cyber events.&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"\"><strong>Specific measures to show cyber recovery readiness and risk.\u00a0\u00a0\u00a0<\/strong><\/li>\n<\/ul>\n\n\n\n<p class=\"\">Metrics and tests that demonstrate an organization\u2019s ability to recover from cyber incidents and assess associated risks. These measures, such as regular recovery drills and risk assessments, provide insight into the effectiveness of recovery plans and identify potential vulnerabilities. They are important for cyber resiliency in particular, as well as preparedness, validation of recovery strategies, and to highlight areas for improvement.&nbsp;<\/p>\n\n\n\n<p class=\"\">Download the full <a href=\"https:\/\/www.commvault.com\/gc\/cyber-recovery-readiness-report\">report<\/a> to find out more about how your organization can be better prepared for a breach.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Key practices and capabilities mark an organization\u2019s maturity around cyber resilience.\u202f <\/p>\n","protected":false},"author":164,"featured_media":522605,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_custom_css":"","_custom_js_footer":"","_page_background_color":"","_remove_from_search":false,"_dark_mode":false,"_light_footer_mode":false,"_sidebar_form":{"id":"","name":"","cta":"","redirect":""},"_alert_notification_bar":{"show":true,"bg_color":"","content":"","call_to_action_label":"","call_to_action_link":""},"_footer_cta":{"show":false,"title":"","subtitle":"","cta_text":"","cta_link":"","background":{"id":0,"url":""}},"_cmv_customer_logo":{"id":0,"url":""},"_jetpack_memberships_contains_paid_content":false,"i18n_hreflangs":"","footnotes":""},"categories":[1446],"tags":[],"cmv_author":[1538],"class_list":{"0":"post-522604","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-cyber-resilience","8":"cmv_author-the-collaborative","9":"entry"},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v23.0 (Yoast SEO v23.0) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>5 Markers of Cyber Maturity\u202f | Blog<\/title>\n<meta name=\"description\" content=\"Key practices and capabilities mark an organization\u2019s maturity around cyber resilience\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.commvault.com\/blogs\/5-markers-of-cyber-maturity\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"5 Markers of Cyber Maturity\u202f\" \/>\n<meta property=\"og:description\" content=\"Key practices and capabilities mark an organization\u2019s maturity around cyber resilience\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.commvault.com\/blogs\/5-markers-of-cyber-maturity\" \/>\n<meta property=\"og:site_name\" content=\"Commvault - English - United States\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/Commvault\/\" \/>\n<meta property=\"article:published_time\" content=\"2024-08-01T13:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-08-01T12:32:56+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.commvault.com\/wp-content\/uploads\/2024\/08\/Social_Blog_Cyber-Maturity-1.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1201\" \/>\n\t<meta property=\"og:image:height\" content=\"629\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"rijnashpk\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@commvault\" \/>\n<meta name=\"twitter:site\" content=\"@commvault\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"rijnashpk\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"5 Markers of Cyber Maturity\u202f | Blog","description":"Key practices and capabilities mark an organization\u2019s maturity around cyber resilience","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.commvault.com\/blogs\/5-markers-of-cyber-maturity","og_locale":"en_US","og_type":"article","og_title":"5 Markers of Cyber Maturity\u202f","og_description":"Key practices and capabilities mark an organization\u2019s maturity around cyber resilience","og_url":"https:\/\/www.commvault.com\/blogs\/5-markers-of-cyber-maturity","og_site_name":"Commvault - English - United States","article_publisher":"https:\/\/www.facebook.com\/Commvault\/","article_published_time":"2024-08-01T13:00:00+00:00","article_modified_time":"2024-08-01T12:32:56+00:00","og_image":[{"width":1201,"height":629,"url":"https:\/\/www.commvault.com\/wp-content\/uploads\/2024\/08\/Social_Blog_Cyber-Maturity-1.png","type":"image\/png"}],"author":"rijnashpk","twitter_card":"summary_large_image","twitter_creator":"@commvault","twitter_site":"@commvault","twitter_misc":{"Written by":"rijnashpk","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.commvault.com\/blogs\/5-markers-of-cyber-maturity#article","isPartOf":{"@id":"https:\/\/www.commvault.com\/blogs\/5-markers-of-cyber-maturity"},"author":{"name":"rijnashpk","@id":"https:\/\/commvault-new.go-vip.net\/#\/schema\/person\/e8397b26dc620551baacfb35c66ec01d"},"headline":"5 Markers of Cyber Maturity\u202f","datePublished":"2024-08-01T13:00:00+00:00","dateModified":"2024-08-01T12:32:56+00:00","mainEntityOfPage":{"@id":"https:\/\/www.commvault.com\/blogs\/5-markers-of-cyber-maturity"},"wordCount":595,"publisher":{"@id":"https:\/\/commvault-new.go-vip.net\/#organization"},"image":{"@id":"https:\/\/www.commvault.com\/blogs\/5-markers-of-cyber-maturity#primaryimage"},"thumbnailUrl":"https:\/\/www.commvault.com\/wp-content\/uploads\/2024\/08\/Social_Blog_Cyber-Maturity-1.png","articleSection":["Cyber Resilience"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.commvault.com\/blogs\/5-markers-of-cyber-maturity","url":"https:\/\/www.commvault.com\/blogs\/5-markers-of-cyber-maturity","name":"5 Markers of Cyber Maturity\u202f | Blog","isPartOf":{"@id":"https:\/\/commvault-new.go-vip.net\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.commvault.com\/blogs\/5-markers-of-cyber-maturity#primaryimage"},"image":{"@id":"https:\/\/www.commvault.com\/blogs\/5-markers-of-cyber-maturity#primaryimage"},"thumbnailUrl":"https:\/\/www.commvault.com\/wp-content\/uploads\/2024\/08\/Social_Blog_Cyber-Maturity-1.png","datePublished":"2024-08-01T13:00:00+00:00","dateModified":"2024-08-01T12:32:56+00:00","description":"Key practices and capabilities mark an organization\u2019s maturity around cyber resilience","breadcrumb":{"@id":"https:\/\/www.commvault.com\/blogs\/5-markers-of-cyber-maturity#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.commvault.com\/blogs\/5-markers-of-cyber-maturity"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.commvault.com\/blogs\/5-markers-of-cyber-maturity#primaryimage","url":"https:\/\/www.commvault.com\/wp-content\/uploads\/2024\/08\/Social_Blog_Cyber-Maturity-1.png","contentUrl":"https:\/\/www.commvault.com\/wp-content\/uploads\/2024\/08\/Social_Blog_Cyber-Maturity-1.png","width":1201,"height":629},{"@type":"BreadcrumbList","@id":"https:\/\/www.commvault.com\/blogs\/5-markers-of-cyber-maturity#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.commvault.com\/"},{"@type":"ListItem","position":2,"name":"5 Markers of Cyber Maturity\u202f"}]},{"@type":"WebSite","@id":"https:\/\/commvault-new.go-vip.net\/#website","url":"https:\/\/commvault-new.go-vip.net\/","name":"Commvault - English - United States","description":"","publisher":{"@id":"https:\/\/commvault-new.go-vip.net\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/commvault-new.go-vip.net\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/commvault-new.go-vip.net\/#organization","name":"Commvault","url":"https:\/\/commvault-new.go-vip.net\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/commvault-new.go-vip.net\/#\/schema\/logo\/image\/","url":"https:\/\/www.commvault.com\/wp-content\/uploads\/2024\/03\/logo-commvault-horizontal.jpg?quality=80","contentUrl":"https:\/\/www.commvault.com\/wp-content\/uploads\/2024\/03\/logo-commvault-horizontal.jpg?quality=80","width":1200,"height":628,"caption":"Commvault"},"image":{"@id":"https:\/\/commvault-new.go-vip.net\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/Commvault\/","https:\/\/x.com\/commvault","https:\/\/www.instagram.com\/commvault\/","https:\/\/www.linkedin.com\/company\/commvault","https:\/\/www.youtube.com\/user\/commvault","https:\/\/en.wikipedia.org\/wiki\/Commvault"]},{"@type":"Person","@id":"https:\/\/commvault-new.go-vip.net\/#\/schema\/person\/e8397b26dc620551baacfb35c66ec01d","name":"rijnashpk","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/commvault-new.go-vip.net\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/37c838d5879db9a6fc3632ac17fcc4a8?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/37c838d5879db9a6fc3632ac17fcc4a8?s=96&d=mm&r=g","caption":"rijnashpk"}}]}},"jetpack_featured_media_url":"https:\/\/www.commvault.com\/wp-content\/uploads\/2024\/08\/Social_Blog_Cyber-Maturity-1.png","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/posts\/522604","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/users\/164"}],"replies":[{"embeddable":true,"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/comments?post=522604"}],"version-history":[{"count":1,"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/posts\/522604\/revisions"}],"predecessor-version":[{"id":522606,"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/posts\/522604\/revisions\/522606"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/media\/522605"}],"wp:attachment":[{"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/media?parent=522604"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/categories?post=522604"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/tags?post=522604"},{"taxonomy":"cmv_author","embeddable":true,"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/cmv_author?post=522604"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}