Page 35 - gs260502
P. 35

Insights and Expertise




                                                                Resilience must be designed, not improvised

            outage underscored how dependent large por-         In financial services, resilience is a necessity, not a nice-to-
            tions of the internet have become on a relatively   have. It's part of the core information security triad: confi-
            small number of infrastructure providers.           dentiality, integrity and availability.  Lose availability, and
                                                                the other two principles can't function meaningfully.
            A year earlier, the CrowdStrike incident demon-
            strated similar vulnerabilities on an even broader   Resilience must be designed and meticulously applied
            scale. On July 19, 2024, a faulty update to Crowd-  long before an incident hits. This mindset means compre-
            Strike’s Falcon security software caused roughly    hensively understanding your architecture, regularly re-
            8.5 million Microsoft Windows systems world-        hearsing failure scenarios, and ensuring your teams know
            wide to crash or enter reboot loops. Airlines,      exactly what to do when a provider or service goes dark.
            banks, retailers, hospitals and payment systems
            experienced disruptions as organizations strug-     Good architecture isolates faults, and a good process en-
            gled to restore affected systems.                   sures continuity plans are living documents, not "emer-
                                                                gency" PDFs left opened since onboarding, digitally gath-
            Although the problem originated in a cybersecu-     ering dust.
            rity software update, the consequences quickly
            spread far beyond IT departments. Banks expe-       Compliance frameworks  play  a considerable part here.
            rienced outages, retailers encountered payment      ISO, PCI, DORA, NIST, NIS2—these aren't there for box-
            processing failures and some merchants were         ticking. They're the guardrails keeping resilience embed-
            forced to accept only cash. The incident high-      ded in day-to-day operations instead of becoming a rare
            lighted how operational resilience failures can     audit exercise.
            rapidly become customer-facing financial dis-
            ruptions.                                           The consequences of ignoring incidents are severe: dam-
                                                                aged trust, reputational hits, direct financial losses, in-
            Both events reinforced concerns about concentra-    creased fraud exposure and greater regulatory pressure.
            tion risk in digital infrastructure. Organizations   In an industry where competitors often rely on the same
            increasingly rely on common cloud providers,        core infrastructure, resilience becomes one of the last true
            security platforms and authentication services to   differentiators.
            support critical operations. While those shared
            platforms provide scale and efficiency, they also
            create systemic vulnerabilities when failures oc-
            cur.                                                             Paint a Brighter Future
            The lesson for financial institutions is not simply              for your Business today.
            to avoid outages—an impossible goal in highly
            complex  systems.  Instead,  resilience  must  be-
            come part of core operational strategy. Multi-
            cloud architectures, redundancy planning, fault                    Let the advertising versatility of
            isolation and incident-response rehearsals are no                        a GS Resource Guide
            longer optional safeguards. They are competitive                   help you paint a brighter future
            necessities in a payments ecosystem where avail-                          for your business.
            ability, trust and continuity are inseparable.
                                                                              Viewable: Online & Front Page Option

        If a single link in that chain snaps, the entire experience           • Ability to purchase on a quarterly basis.
        can collapse.                                                          Great for short term contract/test runs
                                                                               of new products or services.
                                                                              • Great way to close out your yearly advertising
        The Cloudflare outage mirrored the dynamics of                         accounts and start fresh for the new year.
        CrowdStrike's incident in July 2024 (see  https://tinyurl.            • Quarterly payments schedules available.
        com/3bzsbwp9). The root problem had nothing to do with                • Discounts for long term contracts & multiple listings.
        payments directly, yet payments became one of the most
        discernible casualties.
                                                                    IT’S ALL ABOUT YOUR SUCCESS.
        Payments infrastructure is tightly connected, highly dis-
        tributed and fundamentally dependent on the strength of      LET US HELP YOU GET THERE.
        its weakest link—the nature of the ecosystem.
                                                                        707-284-1693 | Sales@greensheet.com

                                                                                                                35
   30   31   32   33   34   35   36   37   38   39   40