From Static Defenses To Dynamic Systems

Cybersecurity today isn’t just about prevention – it’s about ensuring continuity and recovery in the face of inevitable breaches or outages. Take a moment to look at your organization: If your systems went down, how long would it take for you to be fully operating again?

Building a truly resilient defense requires multi-layered strategies that protect against evolving threats and ensure systems can endure.

This past summer, CrowdStrike learned the hard way that its systems were not resilient enough. One small mistake in an update pushed out to users caused systems to crash across the globe, halting operations for airports, banks and more. 

This incident highlights how a single error can cascade through interconnected systems and underscores the need for cybersecurity leaders to map and manage dependencies proactively today. While CrowdStrike resolved the issue quickly, the ripple effect left many customers struggling to restore operations for weeks. Conducting regular recovery timeline tests – both for internal systems and those dependent on them – could have significantly reduced downtime and disruption for their customers.

Resilience goes beyond defense though, too; it’s about planning for worst-case scenarios and ensuring systems bounce back stronger. In 2025, hyper-vigilant proactivity and resilience will be essential for effective cybersecurity strategies across the world.

Human Error Remains The Achilles’ Heel

Attackers are increasingly exploiting the gaps between technical defenses and human behavior, making human error one of the greatest vulnerabilities in cybersecurity. Advanced training must continue to evolve alongside attackers' tactics to combat this – moving beyond simple simulation exercises. Incorporating adaptive training environments that use AI to generate evolving attack scenarios for instance ensures employees regularly face novel threats.

The more exposure they have to these dynamic challenges, the better equipped they will be to better protect their organization.

Meaningful metrics matter too. Tracking phishing training participation rates isn’t enough anymore. Instead, measuring post-training improvement rates, like how often employees correctly identify and report phishing attempts, is much more impactful. Additionally, analyzing response times – how quickly employees report incidents and how fast teams mitigate them – provides valuable insights into real-world preparedness and confirms that employees can successfully avert more advanced threats like APTs. 

Proactive System Analysis 

The interdependencies in today’s digital systems mean failures in one area can cascade across an entire organization. As the CrowdStrike incident demonstrated, organizations fall short when critical dependencies go unnoticed until a failure occurs. To prevent this, cybersecurity teams must move beyond siloed testing and adopt proactive system analysis.

Siloed testing overlooks how systems as a whole interact under real-world pressure. To build greater resilience, organizations need to map their interdependencies dynamically by asking themselves questions like “Which of our systems rely on others and how will any failures propagate as a result of an attack on one?” Continuous “war game” simulations can help stress-test resilience, exposing weak links before they become points of failure and allowing organizations to build fail-safes directly into system design. 

Rethinking Ransomware-Resistant Backups As A Strategic Asset

Backups are often treated as an afterthought when they should be seen as a cornerstone of any ransomware strategy, as they’re critical for restoring operations quickly in the event of an attack. Offline and air-gapped backups are essential to ensure isolation from compromised systems and unauthorized access. Automating integrity checks also ensures backups remain uncorrupted and accessible under pressure.

Simulating recovery through drills prepares teams for worst-case scenarios. Every minute counts, and end-to-end scenarios can highlight interdependencies or bottlenecks that slow recovery.

Organizations shouldn’t assume that backups are a silver bullet, however. The only way backups remain effective is through proper recovery workflow testing and the right processes and team support in place to restore operations quickly.

Ethical Considerations In AI & Decentralized Systems

The risks of unchecked AI are immense and as the technology becomes a core cybersecurity tool, organizations must grapple with ethical and operational questions about its use to uphold resilience in 2025 and beyond.

To minimize risk, organizations should first establish clear governance frameworks to ensure transparency in decision-making. This reduces the risk of the AI performing unintended actions and helps limit the impact of adversarial attacks. Next, they should implement oversight mechanisms for high-stakes actions and identify those responsible for intervening when the AI makes an error. Finally, they need to stay ahead of compliance challenges by aligning AI practices with emerging regulations and legal frameworks. 

When integrating AI into cybersecurity systems, it will be essential to ensure that AI-driven decisions are explainable rather than relying on black-box models.

Organizations should also assess the human impact of AI errors. Mistakes in automated decision-making can have far-reaching consequences, so balancing automation with human oversight is key to ethical AI deployment.

Resilience As The Ccornerstone Of Cybersecurity In 2025

Resilience isn’t just about enduring threats – it’s about maintaining the ability to operate and recover under any circumstances. Building dynamic systems requires multi-layered strategies, including adaptive training, AI-driven defenses, proactive system analysis, and robust backup solutions. Continuous testing and refinement ensures systems can keep pace with evolving threats.

By adopting these practices, cybersecurity leaders can shift from static defense to truly resilient systems, capable of mitigating risks and ensuring long-term operational strength in 2025 and beyond.

Engin Kirda is a program co-chair of ACM’s CCS and Professor at Northeastern University

Image: Andrii Yalanskyi

You Might Also Read:

Are Any Of Your Suppliers A Security Risk Waiting To Happen?:


If you like this website and use the comprehensive 7,000-plus service supplier Directory, you can get unrestricted access, including the exclusive in-depth Directors Report series, by signing up for a Premium Subscription.

  • Individual £5 per month or £50 per year. Sign Up
  • Multi-User, Corporate & Library Accounts Available on Request

Cyber Security Intelligence: Captured Organised & Accessible


 

 

« Medusa Ransomware Attacks Focus On Critical Infrastructure
Guidance Is Coming, But Hackers Aren’t Waiting »

Infosecurity Europe
CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

ZenGRC

ZenGRC

ZenGRC (formerly Reciprocity) is a leader in the GRC SaaS landscape, offering robust and intuitive products designed to make compliance straightforward and efficient.

Syxsense

Syxsense

Syxsense brings together endpoint management and security for greater efficiency and collaboration between IT management and security teams.

TÜV SÜD Academy UK

TÜV SÜD Academy UK

TÜV SÜD offers expert-led cybersecurity training to help organisations safeguard their operations and data.

XYPRO Technology

XYPRO Technology

XYPRO is the market leader in HPE Non-Stop Security, Risk Management and Compliance.

NordLayer

NordLayer

NordLayer is an adaptive network access security solution for modern businesses — from the world’s most trusted cybersecurity brand, Nord Security. 

Identity Theft Resource Center (ITRC)

Identity Theft Resource Center (ITRC)

ITRC is a non-profit organization established to empower and guide consumers, victims, business and government to minimize risk and mitigate the impact of identity compromise and crime.

Arxan Technologies

Arxan Technologies

Arxan is a leader of application attack-prevention and self-protection products for Internet of Things (IoT), Mobile, Desktop, and other applications.

Data61

Data61

Data61 is Australia’s leading digital research network offering the research capabilities, IP and collaboration programs to unleash the country’s digital & data-driven potential.

sayTEC

sayTEC

sayTEC's mission is to develop and deliver next-generation products and services in encrypted data and voice transmission.

Jobsora

Jobsora

Jobsora is an innovative job search platform in the UK and more than 35 other countries around the world. Sectors covered include IT and cybersecurity.

Secure Technology Integration Group (STIGroup)

Secure Technology Integration Group (STIGroup)

Secure Technology Integration Group, Ltd. (STIGroup) is an innovative firm that provides CyberSecurity consulting, secure IT engineering, managed security services, and human capital solutions.

Beyond Encryption

Beyond Encryption

Mailock by Beyond Encryption is a secure email solution that allows businesses to exchange email securely, safe in the knowledge that their email can only be read by their intended recipient.

Stronger International

Stronger International

Stronger International provides expert cyber services and training to organizations and individuals to enhance IT and security knowledge.

Gunnison Consulting Group

Gunnison Consulting Group

Gunnison Consulting Group serves the Federal Government with high quality IT consulting services.

Material Security

Material Security

Material is solving one of the most fundamental problems in security: protecting the data sitting in mailboxes.

Action Fraud

Action Fraud

Action Fraud is the UK’s national reporting centre for fraud and cyber crime where you should report fraud if you have been scammed, defrauded or experienced cyber crime.

Epic Machines

Epic Machines

Epic Machines is a Value Added Reseller and Managed Security Services provider offering Security Transformation using Cloud-native solutions to commercial and government markets.

Systems Engineering

Systems Engineering

Systems Engineering is a SOC 2, Type 2-certified IT strategy and managed technology services provider.

Hack-X Security

Hack-X Security

Hack-X Security provide IT risk assessment and Digital Security Services. We are a trusted standard for businesses that must protect their data from cyber-attacks.

Blackwell Security

Blackwell Security

Blackwell is a driving force in healthcare cybersecurity, transforming how security operations are conducted within this critical sector.

Panasonic Automotive Systems

Panasonic Automotive Systems

Panasonic Automotive Systems brings together security technologies and human resources cultivated across an extensive range of businesses into the automotive field.