Why Backups Aren't Enough & Identity Recovery is Key against Ransomware
Source: YouTube · Cloud Security Podcast · published Dec 16, 2025 · 37:03
Cyber resilience is defined as the ability to recover from attacks and refuse ransom payments, emphasizing that robust identity security is critical for organizational survival 0:00.
Key Takeaways:
• Having backups is insufficient without the proven capability to execute a successful recovery, which is the true measure of resilience 0:09.
• Identity is now the new security perimeter; if identity systems fail, access to all resources is lost, making it the "ground zero" of security 0:16.
• Organizations must ensure they can "rewind" erroneous actions made by agents or users to maintain system integrity 0:24.
• Most security discussions focus heavily on backup and recovery mechanisms while neglecting the critical need to back up and protect identity systems 0:29.
Ultimately, true cyber resilience requires shifting focus from simple data backups to comprehensive identity protection and recovery capabilities.
Sources:
- 0:00 Definition of cyber resilience and rejecting ransom.
- 0:09 Distinction between having backups and the ability to recover.
- 0:16 Identity as the new perimeter and its critical importance.
- 0:24 The need to reverse erroneous agent actions.
- 0:29 The oversight of identity backup in current security conversations.
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
Cyber resilience is your ability to bounce back. It's your ability to say no to paying a ransom. >> Because I imagine a lot of companies also say, "I hear you, Matt. I've got backups, man. I'm I think I'm covered." >> No, it's not. Having backup doesn't mean anything, right? Do you have the ability to recover? That's the key. I feel like identity is the new perimeter. If identity is down, everything's down. You have no ability to access anything. Your identity system is ground zero. If that agent did something erroneous, you need the ability to be able to rewind that back. >> Are you backing up your identity? A lot of times conversations around cyber security resilience are framed around backup recovery but not really around identity. For this particular conversation, I had Matt from Rubri…