Most Cyber Recovery Plans Overlook Business Continuity, Cohesity Report Finds — Cohesity, Inc.

Event summary

78% of organizations prioritize system restoration over maintaining business operations during cyber recovery.
Only 22% of firms have tested their plans for maintaining critical operations during recovery.
Just 3% of respondents believe their current plans are equipped for frontier AI threats.
60% of organizations faced delays due to uncertainty over the safety of restored systems post-attack.
99% of organizations use AI systems, but only 39% have comprehensive recovery plans for AI-related attacks.

The big picture

Cohesity's report highlights a critical gap in cyber recovery planning, where most organizations focus on restoring systems rather than ensuring business continuity. This misalignment becomes more pressing with the rise of AI, which accelerates attack speeds and introduces new vulnerabilities. The findings suggest that as AI becomes more integral to operations, recovery plans must evolve to address both traditional and emerging threats. The report underscores the need for organizations to formalize and test their recovery strategies to minimize business disruption during cyber incidents.

What we're watching

AI Integration Gaps: The pace at which organizations will adapt their recovery plans to account for AI systems and frontier AI threats.
Operational Resilience: Whether firms will shift focus from system restoration to maintaining business operations during cyber recovery.
Testing and Preparedness: How the adoption of Minimum Viable Company (MVC) frameworks will influence recovery priorities and operational outcomes.