Call us now:
It’s difficult to verify statements such as ‘M&S ‘had no plan’ for cyber attacks, insider claims, with ‘staff left sleeping in the office amid paranoia and chaos”. Its indicative of a company that whose Business Continuity and Disaster Recovery may have been caught off guard.An M&S spokesperson added: M&S has robust business continuity plans and processes in place for managing incidents, led by an experienced team.Unfortunately the outside world can only view robust and experienced, through the lens of business operations, and the business may take several weeks before its fully operational. The breadth and depth of cyber attack seems to have been significant, so much so that a full system restore has proven difficult.Having been up to my neck in similar incidents, one can emphasise with the staff at M&S. One has seen many continuity tests work like swans, looking pretty on top, but when one looks underneath, the legs are kicking hard, system restores did not work as planned.It’s a fair assumption to maintain that the hackers are still inside the M&S network. Which makes the clean-up exercise even more complex, as you cannot guarantee a clean system. A reason United Health spent allot of money in 2024 rebuilding its infrastructure. The sort of money that retailers such as M&S may find hard to set aside.@Thaddeus Dziekanowski Brian D. McCarthy Faisal KhanVeritas GRC Marks and Spencer#cybersecurity #cyberriskmanagement #cyberregulation https://lnkd.in/eRHgUwKP
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7325072247415607296