Cyber Resilience for the Defense & Intelligence Communities

Effective cybersecurity requires collaboration across IT infrastructure, security, and data protection, since each team has distinct roles and responsibilities.

Integrating IT infrastructure, data protection, and data security provides significant value by offering a unified perspective on user activity, data monitoring, and data access during a cybersecurity incident. By understanding the data—its location, accessibility, and how to respond and recover swiftly after an incident—agencies can manage it more effectively. This surgical approach to data management is essential for maintaining mission resilience and operational readiness.

Learning Objectives:

• Understand the essential role of backup and recovery; backups must be able to survive an attack, software bug, human error or insider threat and be recovered rapidly into a trusted state
• Identify the importance of establishing recovery point objectives, determining the maximum acceptable duration for data loss and the acceptable data and service restoration time frame
• Establish advanced analytics that can help identify anomalies and accurately point out the last known positive state of the data before an attack