Most organisations had never experienced such a large-scale outage or the ensuing impact on IT infrastructure, nor did they understand what was necessary to mitigate the fallout. Contingency plans had never been truly put to the test, and the scale of the outage doesn't appear to be something that was ever even considered when these plans were drawn up, and scenario planning was conducted. The good news is that in the aftermath of the outage, 86 percent of businesses told us that they are boosting financial investment in software development practices and training.
It is worth pointing out, however, that any increased investment here will only realise its true value when coupled with a wholescale organisational agile mindset shift across people, processes, and tools that emphasises the importance of risk and compliance—all of which protect organisations against vulnerabilities like this.
The old adage of 'do more with less, but do it faster' and the desire to prioritise speed over quality may have been a contributing human factor to the fallout from this event. Now, six months later, and according to our research, software engineering practices are being adjusted, software investment priorities are shifting, and regulations are being adhered to with renewed rigour. You can read exactly how things are changing in the report, but needless to say, things are changing.
With increased awareness and attention towards cybersecurity, now is the perfect time to double down on agile ways of working, robust processes and testing, and reviewing risk management processes.
Our solutions capabilities span assessments, implementations, and training across agile and DevOps, the wider software development lifecycle, and your business processes. If you are taking the next steps towards IT resilience and future security, we can help.