{"id":29912,"date":"2024-07-25T06:53:54","date_gmt":"2024-07-25T06:53:54","guid":{"rendered":"https:\/\/nsfocusglobal.com\/?p=29912"},"modified":"2026-04-17T18:07:37","modified_gmt":"2026-04-17T18:07:37","slug":"lessons-learned-from-the-crowdstrike-incident-strengthening-organizational-resilience","status":"publish","type":"post","link":"https:\/\/nsfocusglobal.com\/pt-br\/lessons-learned-from-the-crowdstrike-incident-strengthening-organizational-resilience\/","title":{"rendered":"Lessons Learned from the CrowdStrike Incident: Strengthening Organizational Resilience"},"content":{"rendered":"\n

On July 19, 2024, a major global digital catastrophe<\/a> unfolded as a faulty Windows update led by cybersecurity firm CrowdStrike’s Falcon software caused widespread system crashes and service disruptions across vital sectors in over 20 countries.<\/p>\n\n\n\n

This incident has exposed the deficiencies of Microsoft and its partners in product stability and risk management. Security software, which should be the first line of defense against cyber threats, has become the cause of system crashes unexpectedly. Therefore, security vendors must not only focus on defending against cyber-attacks but also pay attention to the stability of their own systems.<\/p>\n\n\n\n

From this incident, we also have the following recommendations for organizations:<\/p>\n\n\n

\n
\"Red<\/a><\/figure>\n<\/div>\n\n\n

<\/p>\n\n\n\n

Assume the Inevitable<\/strong><\/h2>\n\n\n\n

<\/p>\n\n\n\n

Organizations must recognize that cyber incidents are not a matter of “if” but “when”. Preparing for the worst during peacetime is crucial to ensure swift recovery and minimal disruption. This includes conducting regular asset inventories, including third-party assets, to have a comprehensive understanding of the potential vulnerabilities within the system. Continuous threat exposure management<\/a> is also essential, ensuring that the organization remains vigilant and proactive in identifying and mitigating risks.<\/p>\n\n\n\n

Robust Testing Protocols<\/strong><\/h2>\n\n\n\n

Regular and rigorous testing, including red-teaming exercises, should be prioritized. This proactive approach helps identify vulnerabilities and reinforces defenses before incidents occur.<\/p>\n\n\n\n

Internal Process Control<\/strong><\/h2>\n\n\n\n

Strengthening internal controls and processes is key. Comprehensive testing and validation of software updates before release are necessary to maintain functionality, stability, and security.<\/p>\n\n\n\n

Supplier Quality and Reliability<\/strong><\/h2>\n\n\n\n