From Static Defenses To Dynamic Systems

Cybersecurity today isn’t just about prevention – it’s about ensuring continuity and recovery in the face of inevitable breaches or outages. Take a moment to look at your organization: If your systems went down, how long would it take for you to be fully operating again?

Building a truly resilient defense requires multi-layered strategies that protect against evolving threats and ensure systems can endure.

This past summer, CrowdStrike learned the hard way that its systems were not resilient enough. One small mistake in an update pushed out to users caused systems to crash across the globe, halting operations for airports, banks and more. 

This incident highlights how a single error can cascade through interconnected systems and underscores the need for cybersecurity leaders to map and manage dependencies proactively today. While CrowdStrike resolved the issue quickly, the ripple effect left many customers struggling to restore operations for weeks. Conducting regular recovery timeline tests – both for internal systems and those dependent on them – could have significantly reduced downtime and disruption for their customers.

Resilience goes beyond defense though, too; it’s about planning for worst-case scenarios and ensuring systems bounce back stronger. In 2025, hyper-vigilant proactivity and resilience will be essential for effective cybersecurity strategies across the world.

Human Error Remains The Achilles’ Heel

Attackers are increasingly exploiting the gaps between technical defenses and human behavior, making human error one of the greatest vulnerabilities in cybersecurity. Advanced training must continue to evolve alongside attackers' tactics to combat this – moving beyond simple simulation exercises. Incorporating adaptive training environments that use AI to generate evolving attack scenarios for instance ensures employees regularly face novel threats.

The more exposure they have to these dynamic challenges, the better equipped they will be to better protect their organization.

Meaningful metrics matter too. Tracking phishing training participation rates isn’t enough anymore. Instead, measuring post-training improvement rates, like how often employees correctly identify and report phishing attempts, is much more impactful. Additionally, analyzing response times – how quickly employees report incidents and how fast teams mitigate them – provides valuable insights into real-world preparedness and confirms that employees can successfully avert more advanced threats like APTs. 

Proactive System Analysis 

The interdependencies in today’s digital systems mean failures in one area can cascade across an entire organization. As the CrowdStrike incident demonstrated, organizations fall short when critical dependencies go unnoticed until a failure occurs. To prevent this, cybersecurity teams must move beyond siloed testing and adopt proactive system analysis.

Siloed testing overlooks how systems as a whole interact under real-world pressure. To build greater resilience, organizations need to map their interdependencies dynamically by asking themselves questions like “Which of our systems rely on others and how will any failures propagate as a result of an attack on one?” Continuous “war game” simulations can help stress-test resilience, exposing weak links before they become points of failure and allowing organizations to build fail-safes directly into system design. 

Rethinking Ransomware-Resistant Backups As A Strategic Asset

Backups are often treated as an afterthought when they should be seen as a cornerstone of any ransomware strategy, as they’re critical for restoring operations quickly in the event of an attack. Offline and air-gapped backups are essential to ensure isolation from compromised systems and unauthorized access. Automating integrity checks also ensures backups remain uncorrupted and accessible under pressure.

Simulating recovery through drills prepares teams for worst-case scenarios. Every minute counts, and end-to-end scenarios can highlight interdependencies or bottlenecks that slow recovery.

Organizations shouldn’t assume that backups are a silver bullet, however. The only way backups remain effective is through proper recovery workflow testing and the right processes and team support in place to restore operations quickly.

Ethical Considerations In AI & Decentralized Systems

The risks of unchecked AI are immense and as the technology becomes a core cybersecurity tool, organizations must grapple with ethical and operational questions about its use to uphold resilience in 2025 and beyond.

To minimize risk, organizations should first establish clear governance frameworks to ensure transparency in decision-making. This reduces the risk of the AI performing unintended actions and helps limit the impact of adversarial attacks. Next, they should implement oversight mechanisms for high-stakes actions and identify those responsible for intervening when the AI makes an error. Finally, they need to stay ahead of compliance challenges by aligning AI practices with emerging regulations and legal frameworks. 

When integrating AI into cybersecurity systems, it will be essential to ensure that AI-driven decisions are explainable rather than relying on black-box models.

Organizations should also assess the human impact of AI errors. Mistakes in automated decision-making can have far-reaching consequences, so balancing automation with human oversight is key to ethical AI deployment.

Resilience As The Ccornerstone Of Cybersecurity In 2025

Resilience isn’t just about enduring threats – it’s about maintaining the ability to operate and recover under any circumstances. Building dynamic systems requires multi-layered strategies, including adaptive training, AI-driven defenses, proactive system analysis, and robust backup solutions. Continuous testing and refinement ensures systems can keep pace with evolving threats.

By adopting these practices, cybersecurity leaders can shift from static defense to truly resilient systems, capable of mitigating risks and ensuring long-term operational strength in 2025 and beyond.

Engin Kirda is a program co-chair of ACM’s CCS and Professor at Northeastern University

Image: Andrii Yalanskyi

You Might Also Read:

Are Any Of Your Suppliers A Security Risk Waiting To Happen?:


If you like this website and use the comprehensive 7,000-plus service supplier Directory, you can get unrestricted access, including the exclusive in-depth Directors Report series, by signing up for a Premium Subscription.

  • Individual £5 per month or £50 per year. Sign Up
  • Multi-User, Corporate & Library Accounts Available on Request

Cyber Security Intelligence: Captured Organised & Accessible


 

 

« Medusa Ransomware Attacks Focus On Critical Infrastructure
Guidance Is Coming, But Hackers Aren’t Waiting »

CyberSecurity Jobsite
Check Point

Directory of Suppliers

IT Governance

IT Governance

IT Governance is a leading global provider of information security solutions. Download our free guide and find out how ISO 27001 can help protect your organisation's information.

Clayden Law

Clayden Law

Clayden Law advise global businesses that buy and sell technology products and services. We are experts in information technology, data privacy and cybersecurity law.

DigitalStakeout

DigitalStakeout

DigitalStakeout enables cyber security professionals to reduce cyber risk to their organization with proactive security solutions, providing immediate improvement in security posture and ROI.

ManageEngine

ManageEngine

As the IT management division of Zoho Corporation, ManageEngine prioritizes flexible solutions that work for all businesses, regardless of size or budget.

North Infosec Testing (North IT)

North Infosec Testing (North IT)

North IT (North Infosec Testing) are an award-winning provider of web, software, and application penetration testing.

4ARMED

4ARMED

4ARMED services cover the end-to-end experience of securing modern software, from design and build through to deploy and test.

Arcitura Education

Arcitura Education

Arcitura is a leading global provider of progressive, vendor-neutral IT training and certification programs.

CSIRT.CZ

CSIRT.CZ

CSIRT.CZ is the National Computer Security Incident Response Team of the Czech Republic.

AuthenTrend

AuthenTrend

AuthenTrend provide biometric authentication products to achieve high security with extreme ease-of-use for the user.

Protiviti

Protiviti

Protiviti consulting solutions span critical business problems in technology, business process, analytics, risk, compliance, transactions and internal audit.

ZenMate

ZenMate

ZenMate is a Virtual Private Network services provider offering secure encrypted access to the internet.

Cansure

Cansure

Cansure is a leading insurance provider in Canada offering a broad range of property & casualty insurance solutions including Cyber & Data Breach insurance.

Fraugster

Fraugster

Fraugster provides the most precise anti-fraud solution for e-commerce businesses.

CyCognito

CyCognito

CyCognito empowers companies to take full control over their attack surface by uncovering and eliminating the critical security risks they didn't even know existed.

Qascom

Qascom

Qascom is an engineering company offering security solutions in satellite navigation and space cybersecurity. We are one of the European key players in GNSS authentication and security.

Federal Bureau of Investigation (FBI) - USA

Federal Bureau of Investigation (FBI) - USA

The mission of the FBI is to protect and defend against intelligence threats, uphold and enforce criminal laws, and provide criminal justice services.

Cork

Cork

Cork is a purpose-built cyber warranty company for managed service providers (MSPs) serving small businesses (SMBs) and the software solutions they manage.

FOSSA

FOSSA

FOSSA is a leading SBOM (software bill of materials) and software supply chain risk management platform.

CyberMindr

CyberMindr

CyberMindr is a SaaS platform for Automated & Continuous Attack Path and Threat Exposure Discovery helps you to proactively identify & assess your attack surface to mitigate associated threats.

eTech S.C.

eTech S.C.

eTech specialize in a broad range of technology solutions, including software development, cybersecurity, infrastructure, and IT outsourcing (ITO) services.

Ory Corp

Ory Corp

Ory's IAM/CIAM solutions are designed to empower businesses with the tools they need to protect their users, services and things, and maintain compliance.