What actions is your organization taking to mitigate the risks and manage the impact of the CrowdStrike outage? (Select all that apply)

Crowdstrike Outage 2024 IT Strategy & Roadmap Cloud+3 more

Recovery procedures: Activating recovery procedures and guiding help desk on increased calls40%

Employee Support: Assisting affected employees with alternative work methods and internal updates (intranet posts, email blasts)64%

Please join or sign in to view more content.

By joining the Peer Community, you'll get:

Peer Discussions and Polls
One-Minute Insights
Connect with like-minded individuals

Incident response: Activating in-depth security investigation and response procedures49%

External support: Seeking support from external consultants, tech vendors, and service providers19%

Security measures: Implementing additional security controls and notifications to protect our users27%

External communication: Providing updates to customers and external stakeholders25%

CrowdStrike communication: Communicating directly with CrowdStrike21%

Microsoft communication: Communicating directly with Microsoft15%

Other: Share in comments3%

138 PARTICIPANTS

1.4k views16 Upvotes9 Comments

Sort By:

Oldest

Board Member2 months ago

Throughout my career, we have always mandated testing the impact of patches in our environment before production deployment to protect its integrity. However, with the evolution of cloud adoption and outsourcing, we have relied on our vendor partners to apply the change management governance required. This global outage definitely highlights customer and partner vulnerabilities.

IT Manager in Construction2 months ago

That's a critical topic as you rollout these updates in a live / production environment, the end users and customers.

Definitely underrated scenario.

CISO2 months ago

This is my favorite fan theory: that the Microsoft Azure outage caused a script at CrowdStrike to insert nulls or error text at an exciting spot in what was supposed to be a routine delta update file, and the driver has a subsequent parse failure.

Legal Analyst2 months ago

We're on Macs so no issues.

Former CISO, VP in IT Services2 months ago

Scheduling a review of the digital resilience of complex ecosystems and critical services. Reviews of both technical resilience with multiple cloud automatic failover configuration, operational QA times before updates applied, and associated business continuity plans.

The "double whammy" of both a Microsoft 365 outage coupled with a Crowdstrike Falcon is driving a very deep and detailed review of the complete technical stack and continuity plans.