Cyber recovery plans weren't designed for this moment

The world changed. Recovery plans haven't. Midsize organizations are relying on recovery assumptions built for a threat landscape that no longer exists, and when a material cyberattack hits, those assumptions rarely hold.

Fast, confident recovery is a defining factor of business resilience and a competitive advantage.

Based on a global survey of nearly 1,000 IT and Security Operations decision-makers from midsize organizations (1,000–1,999 employees), this report reveals where recovery plans break down under real-world conditions and how organizations are closing the gap.

The data highlights the scale of the challenge:

• 76% experienced a material cyberattack in the past 12 months
• 82% exceeded their recovery time objective, with recovery taking nearly 2x longer than planned
• 90% say their recovery plan is likely to require workarounds or improvisation
• 99% use AI systems or workflows, but only 40% say their recovery plan fully accounts for attacks targeting them
• Only 18% have a formally documented and tested Minimum Viable Company (MVC)

Read the report for details.