A recent faulty update from cybersecurity vendor CrowdStrike caused significant disruptions, revealing critical weaknesses in disaster recovery plans. The interconnected nature of SaaS, cloud services, and modern applications exacerbated the IT outage, leading to a continuous blue screen of death on devices running Windows OS with CrowdStrike's threat detection software.

Experts have long advocated for the necessity of automatic updates. Ironically, as the industry began to embrace this practice, an automatic update caused widespread disruption. With the increasing reliance on outsourcing, third-party providers, and cloud services, it seems that organizations have neglected their own disaster recovery responsibilities, assuming that third-party providers take responsibility for handling such issues.

According to Sahil Dhamgaye, an analyst at Quadrant Knowledge Solutions, "With the implementation of automatic updates, it is crucial to also have automatic rollback capabilities. Although CrowdStrike rolled back the faulty update, many users were still affected. Effective rollbacks should separate application data from the OS, allowing for granular recovery without impacting data. This incident serves as a reminder that while organizations have focused on cyberattacks and ransomware, they must not overlook traditional disasters and outages, as demonstrated by the CrowdStrike outage."

Author: Sahil Dhamgaye, an analyst at Quadrant Knowledge Solutions