7.6 Resillient Environments

Resilient digital environments are designed to withstand failure, attacks, and unexpected events.

Benefits include:

• Increased security:
  • Protect data during storage and transfer
  • Reduce system vulnerabilities
• Increased reputation:
  • Protect organisational brand and image
  • Retain customer trust and confidence
• Reduced downtime:
  • Improved system availability
  • Minimised disruption to services

Keeping systems up to date improves security and reliability.

• Planned updates and upgrades
• Patches applied in response to new vulnerabilities

Hardware resilience is maintained through:

• Rolling replacement plans to avoid single points of failure
• Secure disposal of obsolete hardware

Redundancy ensures services remain available if components fail. This includes duplicated systems, storage, and network paths.

Device hardening reduces attack surfaces by:

• Removing unused ports
• Removing unnecessary applications
• Restricting permissions and access

Backups allow data to be restored after failure or data loss.

• Onsite backups
• Remote or offsite backups
• Cloud backups

Recovery sites provide alternative locations for system operation:

• Hot sites – fully operational backups
• Warm sites – partially configured systems
• Cold sites – basic infrastructure only

SOPs ensure consistent and effective responses to incidents. They include:

• Effective staff training
• Employee induction processes
• Guidance for new digital systems
• New or updated organisational policies