The CrowdStrike incident sees businesses implement robust development practices.
July’s CrowdSrike incident is spurring companies to increase investment in software development, testing, delivery practices and tools, bolster headcount, and boost training provisions in multiple areas.
According to research from Adaptavist, the incident showed that 82 percent of organisations either lacked adequate incident response plans, or had none at all before the incident. Of those with plans in place, only 16 percent found them effective during the crisis, while 40 percent discovered their plans were inadequate for an incident of this scale.
However, since the outage, almost half (41 percent) of software development professionals are now confident in their organisation’s ability to prevent a CrowdStrike-like outage from affecting their systems in the future.
Most notably, 81 percent have implemented more robust development practices, while 80 percent report enhanced cybersecurity awareness among staff. The incident has also triggered a complete overhaul of development practices, with 33 percent transforming their software update processes entirely.
Jon Mort, CTO of Adaptavist, said: "The CrowdStrike incident was a call to arms for the software industry. We're seeing unprecedented levels of transformation - from massive investments in training and hiring to fundamental changes in how organisations approach development and vendor relationships.
"However, the data also reveals that this transformation is far from complete. With only 12 percent of organisations expressing high confidence in preventing similar incidents, it's clear that building true resilience will require us to address deeper cultural and structural challenges.”
Written by
Dan Raywood
Senior Editor
SC Media UK
Dan Raywood is a B2B journalist with more than 20 years of experience, including covering cybersecurity for the past 16 years. He has extensively covered topics from Advanced Persistent Threats and nation-state hackers to major data breaches and regulatory changes.
He has spoken at events including 44CON, Infosecurity Europe, RANT Conference, BSides Scotland, Steelcon and ESET Security Days.
Outside work, Dan enjoys supporting Tottenham Hotspur, managing mischievous cats, and sampling craft beers.
