Mohamed Noorul Ameen Mohamed Kassim

https://lnkd.in/gJXCzhSq When your security camera password is “Louvre,” the issue isn’t technology — it’s governance. According to recent audits and media reports, the museum’s systems relied on weak credentials and outdated configurations — an all-too-familiar gap between physical and cyber oversight. You can’t protect what you don’t inventory. Know your physical security assets. Govern your CMDB. Resilience starts with visibility and accountability. Be safe out there. #CyberPhysicalSecurity #Governance #Resilience #Leadership #CMDB #AssetManagement

3

2 Comments

Tuesday's reading - Cybersecurity Report 2024 by Hong Kong’s Cyber Security and Technology Crime Bureau (CSTCB) — a landmark publication that offers a thorough analysis of the evolving cyber threat landscape both globally and within Hong Kong. As cyber threats grow in scale and sophistication, this report shared the key challenges facing governments, businesses, and individuals in today’s digital age. It explores emerging risks such as AI-powered attacks, supply chain vulnerabilities, and deepfake scams. It also highlighted the critical importance of protecting our digital infrastructure and personal data. Beyond identifying threats, the report emphasizes proactive defense strategies, legislative advancements, and the vital role of collaboration between law enforcement, industry, and the public. It presents actionable insights to help organisations strengthen their cybersecurity posture and cultivate resilience against an ever-changing array of cyber risks. For anyone invested in understanding the future of cybersecurity and building safer digital ecosystems, this report is an essential resource that underscores the collective effort required to safeguard our interconnected world. https://lnkd.in/g-yKHY3P #Cybersecurity #CSTCB #HongKong #DigitalSecurity #CyberThreats #AI #CyberResilience

43

2 Comments

🚨 SHARE SOMEONE NEEDS IT 🚨 𝗪𝗶𝗻𝗱𝗼𝘄𝘀 𝗗𝗶𝗿𝗲𝗰𝘁𝗼𝗿𝗶𝗲𝘀 𝗬𝗼𝘂 𝗦𝗵𝗼𝘂𝗹𝗱 𝗞𝗻𝗼𝘄! 🗂️ Ever wondered what those critical Windows system directories do? Whether you're an IT professional, cyber-security expert or just a tech enthusiast, knowing these directories can help with troubleshooting, security analysis and system management. 𝗛𝗲𝗿𝗲 𝗮𝗿𝗲 𝘀𝗼𝗺𝗲 𝗸𝗲𝘆 𝗼𝗻𝗲𝘀: 📂 𝗖:\𝗪𝗶𝗻𝗱𝗼𝘄𝘀\𝗦𝘆𝘀𝘁𝗲𝗺𝟯𝟮\𝗱𝗿𝗶𝘃𝗲𝗿𝘀\𝗲𝘁𝗰\𝗵𝗼𝘀𝘁𝘀 – Local DNS resolution file. 📂 𝗖:\𝗪𝗶𝗻𝗱𝗼𝘄𝘀\𝗦𝘆𝘀𝘁𝗲𝗺𝟯𝟮\𝗰𝗼𝗻𝗳𝗶𝗴\𝗦𝗔𝗠 – Stores user credentials and password hashes. 📂 𝗖:\𝗪𝗶𝗻𝗱𝗼𝘄𝘀\𝗦𝘆𝘀𝘁𝗲𝗺𝟯𝟮\𝗰𝗼𝗻𝗳𝗶𝗴\𝗦𝗘𝗖𝗨𝗥𝗜𝗧𝗬 – Security policies and logs. 📂 𝗖:\𝗪𝗶𝗻𝗱𝗼𝘄𝘀\𝗦𝘆𝘀𝘁𝗲𝗺𝟯𝟮\𝗰𝗼𝗻𝗳𝗶𝗴\𝗦𝗢𝗙𝗧𝗪𝗔𝗥𝗘 – Stores installed software information. 📂 𝗖:\𝗪𝗶𝗻𝗱𝗼𝘄𝘀\𝗦𝘆𝘀𝘁𝗲𝗺𝟯𝟮\𝗰𝗼𝗻𝗳𝗶𝗴\𝗦𝗬𝗦𝗧𝗘𝗠 – System-wide settings and configurations. 📂 𝗖:\𝗨𝘀𝗲𝗿𝘀\*\𝗔𝗽𝗽𝗗𝗮𝘁𝗮\𝗥𝗼𝗮𝗺𝗶𝗻𝗴\𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁\𝗪𝗶𝗻𝗱𝗼𝘄𝘀\𝗦𝘁𝗮𝗿𝘁 𝗠𝗲𝗻𝘂\𝗣𝗿𝗼𝗴𝗿𝗮𝗺𝘀\𝗦𝘁𝗮𝗿𝘁𝘂𝗽 – User startup programs. 📂 𝗖:\𝗪𝗶𝗻𝗱𝗼𝘄𝘀\𝗣𝗿𝗲𝗳𝗲𝘁𝗰𝗵 – Stores prefetch data to optimize app loading times. 📂 𝗖:\𝗪𝗶𝗻𝗱𝗼𝘄𝘀\𝗿𝗲𝗽𝗮𝗶𝗿\𝗦𝗔𝗠 – Backup of user credentials and passwords. 📂 𝗖:\𝗪𝗶𝗻𝗱𝗼𝘄𝘀\𝗔𝗽𝗽𝗖𝗼𝗺𝗽𝗮𝘁\𝗣𝗿𝗼𝗴𝗿𝗮𝗺𝘀\𝗔𝗺𝗰𝗮𝗰𝗵𝗲.𝗵𝘃𝗲 – Tracks program execution history. 📂 𝗖:\𝗪𝗶𝗻𝗱𝗼𝘄𝘀\𝗨𝘀𝗲𝗿𝘀\*\𝗡𝗧𝗨𝗦𝗘𝗥.𝗱𝗮𝘁 – Stores user registry settings. Understanding these can help with digital forensics, security audits and optimizing system performance. If you want to add more, share in comment.

1

Could AI detect a security breach just because an employee logged in 2 minutes earlier than their usual pattern? I recently met with Harsha MV ✈️ Token Singapore. He challenged me to write daily for 30 days. Though this pushes me out of my comfort zone, Harsha's persistence and friendship convinced me to accept. My current fascination is AI's impact on cybersecurity. Here's my perspective on the technology, strategy, risks, and opportunities. Day 1 Insider threats cause many data breaches, yet conventional security tools focus on systems rather than people. Malicious insiders or stolen credentials often remain undetected for months because their actions appear "authorized" within the network. Recently, a large company prevented data theft when their system flagged an employee accessing engineering blueprints at 3 AM—something unprecedented in their employment history. The system automatically restricted access and alerted security. AI-driven User and Entity Behavior Analytics (UEBA) establishes unique behavioral baselines for each user by monitoring login times, file access patterns, data transfer volumes, and application usage. It flags deviations from normal behavior patterns. Takeaway: In today's cybersecurity landscape, normal is the new suspicious. AI goes beyond identifying known threats—it learns what "normal" behavior looks like in your organization and alerts you when someone breaks that pattern.

45

4 Comments

P.S. Hope it’s not too late for a repost! It was another evening well spent attending the exclusive CxO event organized by ISC2 Malaysia Chapter. The session kicked off with Ahmad Fuad Kamarazaman, who delivered an insightful presentation on cyber risk, highlighting real-world cyberattacks that have impacted some of the largest organizations across various industries. The most exciting part was when he introduced the risk quantification method using the Value at Risk (VaR) technique. The energy in the room was electrifying — thanks to the engaging back-and-forth banter between the speaker and the audience, which kept everyone glued to their seats. Admittedly, I found myself trying to decode the formulas like the Da Vinci Code! Despite that, Ahmad Fuad truly deserves the title “Malaysia’s Einstein” for his innovative approach to quantifying risk and translating complex calculations into clear, business-friendly language. The second session fired up with a CxO roundtable discussion, featuring renowned panelists from diverse industries who shared real-life experiences and strategies for communicating cyber risk to the board. Some key takeaways: 💡 The importance of board awareness and effective communication 💡 Developing strategic financial plans and roadmaps to secure board buy-in 💡 Optimizing departmental costs to justify and acquire more security “toys” (tools!) Kudos to the moderator for keeping the discussion engaging and focused. Lastly, the pre-networking session was a great opportunity to connect with new chapter members — looking forward to more events like this in the future! #CyberRisk #CxO #BoardPriority #ISC2MY

15

1 Comment

💡 Identity is the new perimeter. I'm sure you must have heard it. Organizations moved from local accounts to centralized identity. If identity is compromised everything is compromised which is why security must focus on identity protection. 👉 First, let’s break down & understand identity architecture using two simple questions: Authentication: Who are you Authorization: What are you allowed to do Let’s focus on authentication for now ✅ Local Authentication Still many environments today use it Every app or service has its own username and password. Each app maintains its own user database Each app stores its own credentials. Each app enforces its own policies. What does this mean: HR system: one user/password VPN: another 📌 This becomes problem when you: run multiple apps or services need consistent security policies need disable a user everywhere implement MFA across all services need audit and central monitoring This creates unnecessary operational overhead and security risk ✅ Centralized Authentication (One Account for all services) To overcome this chaos, organizations moved to centralized authentication (one account/set of credentials) for many systems Directory Services (Active Directory) solved the problem All applications share a common user directory (e.g. Active Directory), so the username/password is the same everywhere, even if you still must log in to each app separately This helped IT but Users still needed to provide their credentials whenever they access the different services available Users needed Single Sign On (SSO) Users wanted seamless user experience – one credentials, one MFA, access to multiple apps without reentering passwords SSO = a user signs in once and gains access to multiple apps If the organization is fully internal, no Entra ID AD, no cloud IdP, no SaaS then we still get SSO through Windows built in protocols such as Integrated Windows Authentication, ADFS, LDAP etc. This worked for several years until apps moved to the cloud and outside corporate network. Then Kerberos/LDAP/AD based setups no longer work ✅ Federation SAML / OAuth / OIDC solved this problem With federation: Apps do NOT authenticate users directly They redirect to an Idp IdP authenticates user The application must support OAuth or SAML Keep in mind: SAML/OAuth is SSO, but SSO is not always SAML/OAuth Before Entra ID became dominant, many organizations used ADFS as their on-prem federation server. But it has its own flaws. Most organizations today use a hybrid model based on regulatory requirements where they have On-Prem AD: internal directory Entra ID: Cloud IdP With this model, both cloud and on-prem apps can authenticate consistently depending on what app supports SSO is not More Secure by Default, a compromised SSO account grants access everywhere You need to combine SSO with MFA, Conditional Access, risk-based sign ins. #IdentityManagement #ZeroTrust #Cybersecurity #Infosec

2

1 Comment

𝗕𝘂𝗶𝗹𝗱𝗶𝗻𝗴 𝗮 𝗥𝗲𝘀𝗶𝗹𝗶𝗲𝗻𝘁 𝗗𝗶𝗴𝗶𝘁𝗮𝗹 𝗦𝗶𝗻𝗴𝗮𝗽𝗼𝗿𝗲 Yesterday at the GTACS Conference organised by ISACA, we had the privilege of hearing from Mr Ong Kok Wee, Assistant Chief Executive of the Policy and Corporate Development (P&CD) cluster at the Cyber Security Agency (CSA), in his insightful keynote speech on bolstering cyber resilience in Singapore. As Singapore strides towards becoming a digitally trusted economy, with the digital sector contributing nearly 18% to the national economy and 95% digital adoption among firms in 2023, the importance of robust cybersecurity cannot be overstated. Mr Ong highlighted how this rapid digitalisation, especially with widespread cloud usage, introduces complex risks. Common misconfigurations in the cloud, like public storage buckets, are often culprits in data breaches. A significant focus was placed on the expanding digital threat surface due to Artificial Intelligence (AI). Mr Ong outlined critical AI-related risks:  • Agentic AI: The elevated security stakes as AI takes on more autonomous roles in critical workflows.  • Shadow AI: The unwitting exposure of confidential data through unsanctioned AI tool usage by employees.  • Prompt Injection: A novel attack vector that manipulates AI models into revealing sensitive information, with defences still maturing.  • AI-driven Cybercrime: The alarming prospect of AI "turbocharging" cybercrime, from automated malware to phishing campaigns, with estimates suggesting 80% of ransomware attacks could be AI-driven. To counter these evolving threats, Mr Ong emphasised matching digital ambition with digital resilience. The CSA's SG CyberSafe programme and national cybersecurity standards are key enablers. Crucially, the CyberEssentials and CyberTrust certification marks will be expanded in April 2025 to cover cloud security, AI security, and operational technology (OT) security, providing vital guidance on secure AI utilisation, including visibility into third-party AI tools. Recognising implementation hurdles, CSA also offers a CISO-as-a-service scheme for SMEs, providing consultants and up to 70% funding to help them achieve the Cyber Essentials mark. Mr Ong's closing message resonated deeply: cybersecurity must continuously evolve. Organisations must proactively align their security measures with their technology adoption to fully reap the benefits of digitalisation without compromising their security posture. A vital call to action for all of us navigating this dynamic digital future. #Cybersecurity #DigitalResilience #AITrends #CyberThreats

25

1 Comment

One key takeaway from our analysis is this: Many breaches are not the result of highly sophisticated attacks, but of basic control weaknesses that remain unaddressed. In several cases, relatively simple measures — such as stronger access controls, proper system configuration, and regular review of user privileges — could have significantly reduced risk and impact. Strengthening fundamentals is often the most effective starting point.

6

✍️ Directly from My CNAPP Book – Crafted Through Years of Real-World Cloud Security Experience 🚀 Implementing CNAPP: A Practical Roadmap for Cloud Security Leaders All right, let's just understand the Major processes to be followed while successfully implementing any CNAPP solution: Cloud-Native Application Protection Platforms (CNAPP) are transforming how organizations secure their cloud environments. But successful implementation requires more than just deploying a tool—it’s about building a strategy that evolves with your business. Here’s a high-level roadmap to get started: ✅ 1. Assessment Evaluate your current security posture and identify gaps CNAPP can address. Understand your cloud architecture, workloads, and unique risk areas. ✅ 2. Planning Define your integration strategy. Select the right CNAPP solution, establish security policies, and set up processes for continuous monitoring and improvement. ✅ 3. Adoption Start small—focus on critical applications first. Train your team to use CNAPP effectively and enforce policies consistently. ✅ 4. Monitoring & Improvement Security is never “set and forget.” Continuously review metrics, conduct audits, and refine your approach to stay ahead of evolving threats. Bottom line: CNAPP isn’t just a tool—it’s a framework for proactive, unified cloud security. The sooner you start, the stronger your defense. please refer to my book for more clarity: 🛒𝐆𝐫𝐚𝐛 𝐲𝐨𝐮𝐫 𝐜𝐨𝐩𝐲 𝐧𝐨𝐰! 👉 For International Buyers (AVA): https://lnkd.in/gbqqm3g9 👉 For Indian Buyers (AVA): https://lnkd.in/gFzmTmke 👉 Amazon International: https://shorturl.at/CaYQY 👉 Amazon India: https://shorturl.at/eeKGd #AVA #OrangeEducation #CloudSecurity #CNAPP #Cybersecurity #CloudNative #DevSecOps #RiskManagement #MicrosoftDefender #CloudSecurityArchitecture

14

🌩️ Cloudflare Outage: 5 Lessons in Operational Resilience & Business Continuity for Every IT Leader The recent Cloudflare outage was not just a technical disruption — it was a stress test of the world’s digital backbone. For many organisations, it exposed gaps in architecture, communication, and dependency understanding that often remain hidden until something breaks at scale. As an IT leader and someone who lives and breathes continuity, cyber resilience and digital operations, here are my top 5 lessons: 1️⃣ A “Distributed Cloud” Can Still Become a Single Point of Failure Many enterprises realised that their DNS, CDN, Zero Trust gateways, WAF and routing layers all touched Cloudflare somewhere. Resilience is not about vendor confidence; it’s about architecture. ✔️ Multi-CDN ✔️ Redundant DNS ✔️ Independent routing paths A single vendor stack = a single blast radius. 2️⃣ DR & Failover Must Be Tested Without the Primary Vendor A surprising number of DR sites were unusable because they still relied on Cloudflare. Failover cannot depend on the same infrastructure that failed. If DR, HA or BCP relies on identical routing, the failover is just theory, not resilience. 3️⃣ Communication Is a Business Continuity Function During the outage, the biggest damage for many companies came from uncertainty and silence. Timely, transparent, structured communication to leadership, employees, partners and customers reduces business panic and preserves trust. 4️⃣ Know Your Dependencies — REALLY Know Them Most organisations didn’t realise: • Which apps routed through Cloudflare • Which APIs used Cloudflare DNS • Which identity flows depended on Cloudflare tunnels This is why living architecture diagrams, automated dependency maps and impact heatmaps matter. 5️⃣ Chaos Engineering Is Now Mandatory, Not Optional Enterprises must simulate failure of CDN, DNS, identity providers, SASE, network edges and security gateways. If we don’t inject failure, we never discover hidden fragility. Resilience = the ability to degrade gracefully when the unexpected happens. ⸻ 💡 The Realisation Digital resilience is not a document. It is not an SLA. It is not a checkbox. It is an engineering discipline, a leadership mindset and a continuous practice. The Cloudflare outage is a loud reminder: In 2025 and beyond, operational resilience is the new competitive advantage.

5

People keep mixing CISO and Head of IT Security. They are not the same fruit. The CISO is the Chief Information Security Officer. The Head of IT Security runs the day to day hands-on security operations. (Save this post for later) In Malaysia, think nangka and cempedak. Same family outside. Different experience inside. Nangka is firmer, less sticky, more structured. Cempedak is softer, stronger aroma, richer taste. I’ve seen many org charts treat them like one job. I get why. Titles look similar. But… Here is the simple version you can use in any meeting. I don’t think there is much to argue about. If you already do the following: Head of IT Security = Nangka🍐 🔹First line of defence 🔹Hands on, operational, day to day 🔹Prevents, defends, responds and CISO = Cempedak 🍈 🔹Second line of defence 🔹Strategic, governance, oversight 🔹Sets frameworks, aligns to business risk, ensures accountability plus Map both to the Three Lines of Defence with clean reporting lines …then you have nothing new to worry about. And yes, I know I am simplifying. But this is the part people forget: CISO asks, “Are we doing the right things, and are we doing them right?” Head of IT Security asks, “How do we get this done securely and efficiently?” Both roles are critical. One executes. The other governs. One is tactical. The other is strategic. If you mix them, you create risk gaps. If you separate them clearly, you create clarity and control. (Repost this for your team ♻️) P.S. In the photo, choose A or B, which one is nangka or cempedak? P.S.S. Be honest. Do you still mix them up at pasar malam? For more cybersecurity stories > Wesley Yee #weslife

148

107 Comments

Honored to be invited as a panelist at the Microsoft AI QuickStart Programme launch, in collaboration with IMDA and UOB, alongside Minister Josephine Teo. It was a privilege to join industry and public sector leaders in discussing how AI is reshaping business transformation across Singapore’s digital economy. The dialogue reinforced a key reality — AI is no longer experimental; it is becoming foundational to enterprise strategy, productivity, and competitive advantage. During the panel, we explored how organizations can move beyond pilots into scalable AI adoption — focusing on governance, data readiness, and the integration of AI into core business processes. From manufacturing to financial services, the ability to operationalize AI responsibly and at scale will define the next generation of industry leaders. As a technology leader and doctoral researcher in Generative AI, I am particularly encouraged by initiatives like this that bridge policy, industry, and innovation. Building a strong AI ecosystem requires not just technology, but collaboration, trust, and continuous capability development. Thank you to Microsoft, IMDA, and UOB for driving this important agenda forward. I look forward to contributing further to Singapore’s AI journey and supporting organizations in translating AI potential into real business value. #AI #GenerativeAI #DigitalTransformation #Leadership #Singapore #IMDA #Microsoft #Innovation #AIAdoption #CTO

56

3 Comments

Cheering & sharing happiness~ Completing the Chief Operating Officer Programme at Nanyang Business School, NTU Singapore has been a deeply rewarding experience. Across the assignments and discussions, one theme became increasingly clear: Operational excellence today is no longer just about efficiency — it is about navigating complexity. From AI adoption and predictive analytics to organisational design, financial trade-offs, and sustainability, the programme reinforced how COO decisions sit at the intersection of: Strategy × Data × People × Risk × Execution For me, many concepts resonated strongly with data centre operations: * Designing smarter control systems through AI & analytics * Balancing explainability vs optimisation * Leading transformation while preserving stability * Embedding sustainability into operating models * Building high-performing, psychologically safe teams Grateful for the structured frameworks that sharpen decision-making beyond intuition. Learning never stops — but perspective evolves. 🎊

79

2 Comments

Singapore can’t claim to be a Smart Nation while tolerating cyber gaps in private firms. Here's the trick to achieve 100% Cyber Defense 🛡️ Profit first, cybersecurity later: that's the hard truth from every business owner. According to the QBE SME Survey 2024, only 47% of SMEs now feel fully aware of cyber risk, down from 57% last year. Skipping a vulnerability scan is like refusing the weigh-in before a buffet: no scale, no calories. The illusion gives way when the weakest link snaps. On 7 Apr 2025, ransomware at vendor Toppan Next Tech leaked 8,200 DBS bank statements. When one domino in the supply chain slips, the effect is felt across the board. We have solved this incentive problem before. In 2013, the 400% Productivity & Innovation Credit (PIC) transformed "someday" projects into tasks companies tackled immediately. It made the carrot big enough to taste. The same recipe can work again. 🥕 𝗖𝘆𝗯𝗲𝗿 𝗥𝗲𝘀𝗶𝗹𝗶𝗲𝗻𝗰𝗲 𝗖𝗿𝗲𝗱𝗶𝘁 (𝗖𝗥𝗖) - 𝘗𝘐𝘊 𝘳𝘦𝘣𝘰𝘳𝘯 𝘧𝘰𝘳 𝘤𝘺𝘣𝘦𝘳𝘴𝘦𝘤𝘶𝘳𝘪𝘵𝘺 400% tax deduction or 40% cash-payout when firms: 1️⃣ engage CISO as-a-Service to develop Cybersecurity Health Plan or other qualifying activities 2️⃣ achieved at least Cyber Essentials 3️⃣ bill via InvoiceNow e-invoicing PIC lowered the cost of entry; CRC aims to do the same. A $3,680 Cyber Essentials project, less 70% CISO-as-a-Service grant and 40% CRC cash payout, shrinks to $662 out-of-pocket. 𝗔𝗯𝘂𝘀𝗲? 𝗙𝗶𝘅𝗲𝗱.  • InvoiceNow validation kills fake quotes  • Disburse Cash 70% on invoice, 30% after certification  • Solutions must sit on the CSA pre-approved list 🔨 𝗦𝘁𝗶𝗰𝗸 (𝘣𝘦𝘤𝘢𝘶𝘴𝘦 𝘤𝘢𝘳𝘳𝘰𝘵𝘴 𝘨𝘦𝘵 𝘭𝘰𝘯𝘦𝘭𝘺) * Revenue-linked penalty for firms with zero controls, refunded once certified within 12 months * No Cyber Essentials, no GeBIZ bids Would this mix of carrots and sticks make you invest? Comment YES or NO and share what would you do instead! #CyberSecurity #CyberResilience #PICReboot QBE: https://lnkd.in/gvVNTh3T Toppan Next Tech Ransomware: https://lnkd.in/g7BWDy8F

23

10 Comments

Network Box Singapore is certified CTM Advocate ( Highest Tier ). The Cyber Trust Mark (CTM) is a cybersecurity certification for organisations developed by the Cyber Security Agency of Singapore (CSA). They serve as visible indicators to demonstrate that organisations have put in place good cybersecurity practices to protect their operations and customers against cyber attacks.

12

1 Comment

"Global Outages: Repeat Wake-up Call for Resilient Business Service Architecture" Cloud does not always mean guaranteed continuity and 100% availability, echoes loud enough. So do tightly coupled bundled services. Always Red flags from risk perspective. Its time enterprise focus on the fundamental principle “Designing for failure.” Lately, a few engaging conversations have really fueled my reflections on how we design service for continuity and resilience. When looking at architectural landscapes, even if it costs more, it is always worth the investment. Smart Investments Over Downtimes. CAPEX over OPEX. 1.     Multi-Availability Zone, Multi-Region Deployments Redundant, cross-region setups ensure business continuity when one region goes dark. Think EMEA to Americas to APAC, true global coverage.   2.     Decouple Critical Dependencies- Repeat global incidents, entire world is shut down Bundling endpoint protection, identity, and collaboration tools under one provider is a wake-up alarm until one update cripples globally. Service providers will always sell; the responsibility to choose wisely is with the customer. 3.     Active-Active over Passive Standby Design infrastructure to auto-failover. Business-critical apps should failover automatically. Real Resiliency. 4.     Chaos Engineering Mindset Repeat test of recovery plans. Challenge every step of the recovery Business Resilience is no longer optional; it is the brand’s value linked to credibility and share values.   #ResilienceByDesign #CloudArchitecture #BusinessContinuity #Brandprotection #customerassurance

1

So, according to this piece cloud outages will get more due to the fact that American companies - as usual - are concentrating on earnings and cost cutting while neglecting the basis of their business. … seems about right. Bottom line: They’re all stock market optimized, treating their business and their (locked in) „customers“/victims as milking cow, forgetting to feed the cow. MBA is a weapon of mass destruction too.

3

1 Comment