{"id":5635,"date":"2024-07-25T14:20:47","date_gmt":"2024-07-25T13:20:47","guid":{"rendered":"https:\/\/www.imsm.com\/nz\/?p=5635"},"modified":"2024-07-25T14:20:47","modified_gmt":"2024-07-25T13:20:47","slug":"3-key-takeaways-from-the-crowdstrike-outage","status":"publish","type":"post","link":"https:\/\/www.imsm.com\/nz\/news\/3-key-takeaways-from-the-crowdstrike-outage\/","title":{"rendered":"3 Key Takeaways from the CrowdStrike Outage"},"content":{"rendered":"
July 19, 2024, will long be remembered as the most extensive system and infrastructure outage in recent memory.<\/em><\/p>\n On Friday, systems worldwide faltered\u2014and outright failed in many instances\u2014due to a faulty update to the Falcon sensor configuration for Windows systems. Consequently, mass-scale outages hit many vital industries, stirring up turmoil for those waiting for flights, appointments, bank transfers, and just going about their daily lives. If you experienced the dreaded BSOD (Blue Screen of Death), you\u2019d be one of many.<\/p>\n We\u2019ll discuss three key takeaways, both positive and negative, from the CrowdStrike outage.<\/p>\n CrowdStrike didn\u2019t test their update rigorously enough before deploying it live, which led to the outage, meaning that ultimately, the fault happened due to a testing oversight.<\/p>\n There may have been a presumption that the update was ready for deployment before it actually was. As we\u2019ve all come to know, this has had colossal consequences \u2013 not just for CrowdStrike themselves but for companies and organisations running on Windows systems across the globe.<\/p>\n Once the update went live, the effects hit instantaneously. However, CrowdStrike responded to the situation quickly and transparently. They kept their lines of contact open and accessible throughout the crisis, which they\u2019ve received some praise for.<\/p>\n Despite the odds, CrowdStrike has emerged from the situation quite favourably because of its response. It has set a shining example of how to manage a crisis, not just because of its response but also because it effectively navigated the issue despite its sheer scale. They may stand out in this way because this isn\u2019t always the outcome when large-scale problems arise. It\u2019s important to note that they aren\u2019t entirely free from scrutiny \u2013 in fact, they\u2019re far from it. But compared to similar incidents, they have fared quite well.<\/p>\n When things go wrong, companies often encounter internal turmoil. When this inevitably meets the public eye, it can negatively affect their reputation and diminish trust among their consumers. So far, this has yet to happen to CrowdStrike.<\/p>\n For many, the sheer scale of the outage is the most astounding part of the whole event. It has become one of the most significant technological failures in recent history, leaving no industry unaffected (aside from those using Mac and Linux systems).<\/p>\n It highlighted how dependent companies and individuals across the world are on Windows-based systems, and how issues can bring vital services crashing down. What happened might make people apprehensive about Microsoft and CrowdStrike and how much of their infrastructure they should base virtually, especially on cloud-based systems.<\/p>\n While it was a stressful day for Windows-based databases, systems, and general users, it was business as usual for Mac and Linux. So, the outage begs a few questions all companies should consider:<\/p>\n – Should companies take measures to ensure they can continue operating despite tech issues? This occasion has taught us that mass-scale outages are definitely possible in the modern age, and mishaps can quickly occur. Despite this, there are a few things that set this outage apart from other large-scale events: contrary to many big tech failure stories, no data spilt into the public domain, and no malicious third parties were involved. It all chalked up to one minor oversight, which unfortunately had dire consequences.<\/p>\n Notably, CrowdStrike are certified to ISO\/IEC 27001:2022<\/a><\/span>. Despite the oversight, the standard has served them well in risk management, information safeguarding, and adhering to global security standards. IMSM has certified thousands of businesses to this standard.<\/p>\n We pride ourselves on our commitment to compliance and business development. ISO\/IEC 27001:2022<\/a><\/span> equips you with the right tools, measures, and actions to protect you from security risks, data breaches, and of course, outages like this one.<\/p>\n1. Lack of Prior Testing<\/h2>\n
2. Quick and Transparent Response<\/h2>\n
3. A Worldwide Impact<\/h2>\n
Don\u2019t Put All Your Eggs in One Basket!<\/h3>\n
\n– Has the modern world become too dependent on the systems and frameworks that conglomerates like Microsoft have set up?
\n– Should companies diversify their range of software and hardware suppliers to give themselves back-up measures if this ever happens again?<\/p>\n