Business continuity coverage highlights cyber incident response gaps

Business continuity and disaster recovery remain central to information security planning, with coverage focused on protecting sensitive information, avoiding compliance penalties and reducing threats such as data breaches and insider activity.

Recent news highlights include CISA’s new framework to improve CVE data quality, EU Court of Auditors criticism of shortcomings in major cyber incident response, and ISACA findings that AI incident response readiness is lagging behind AI adoption. Other developments include claimed attacks involving ShinyHunters, active exploitation of a critical Cisco ISE flaw and Spain’s first AI-powered data breach disclosed by AEPD.

Ransomware and data exposure remain recurring concerns. Manufacturing accounts for 22% of all ransomware victims, while experts raised alarm over Gyazo’s breach of 490 Million metadata records. Fenix24 found only four of more than 800 clients came close to stated ransomware recovery targets of 24-48 hours.