By Tony De Bos, Vice President of Security and Resiliency at Kyndryl, and Allen Downs, Vice President of Security and Resiliency at Kyndryl
Online methods to break into data systems are on the rise. Adopting a cloud-native approach to cybersecurity can help businesses respond to these threats more effectively. But in doing so, organizations must recognize the difference between “availability” and “recoverability.” Today’s cyber threats can include corrupting or restricting access to digitally-stored data, as well as its theft or malicious deletion. In a cloud-based or hybrid IT system, business continuity hinges on data availability in the face of cyberattacks — whether targeting the main system, the suppliers and subcontractors connected to it, or even the power grid that the data center depends on.
Before the online, digitally-connected era of computing, companies backed up their operational and customer data onto analog tapes. These backups allowed businesses to restore operations during catastrophic hardware failures. This was a solid strategy before the internet, but such methods are no longer sufficient to address the complexities of modern cyber threats.
The 2024 Kyndryl Readiness Report revealed that while 90% of business and technology leaders are confident their IT infrastructure is best-in-class, only 39% say their IT is ready to manage future risks. Why? According to cross-industry operational data from Kyndryl Bridge, a whopping 44% of servers, networks and systems are near end-of-life. These aging systems are no longer supported with updates that would help fortify them against the latest cybersecurity threats.
For example, legacy systems won’t be able to run quantum-safe encryption software that helps guard against the emerging threat of attacks that can pierce even today’s strongest data-protection shields. Organizations need systems that protect against quantum threats and allow operators to change compromised encryption keys quickly. To put it bluntly, you need the latest equipment to stay safe.