When the CrowdStrike software bug affected 8.5 million computers worldwide on July 19, many organizations were forced to revert to manual, paper-based processes. Air travelers, for instance, experienced this firsthand, with some ticket agents handwriting boarding passes due to digital system failures.
The incident highlighted a growing trend of organizations preparing for potential IT disruptions by maintaining paper-based backup systems. Cyber-experts now recommend that companies develop strategies to continue operations during technological breakdowns.
Norsk Hydro, a Norwegian aluminum and renewable energy firm, provides a compelling example of resilience during a cyber-attack. In 2019, hackers used ransomware to lock staff out of 20,000 computers across 40 countries. Instead of paying the ransom, the company found creative workarounds. Employees retrieved old binders with product instructions, used printed order requests, purchased local computers and printers, and even dusted off vintage fax machines to maintain operations.
Chris Butler, a resilience director at Databarracks, suggests several strategies for preparing for potential IT failures:
1. Create “disaster recovery packs” with paper forms and alternative communication methods
2. Conduct training days where employees practice using non-digital tools like flipcharts
3. Maintain paper-based contingency plans for critical processes
However, experts acknowledge limitations to paper-based systems. Gareth Mott from the Royal United Services Institute notes that manual processes are slower and challenging to coordinate across large organizations. Some tasks, like financial trading, cannot easily transition to paper.
Alternative backup strategies include:
– Purchasing backup devices like Chromebooks
– Maintaining dormant communication groups on messaging apps
– Implementing off-site or segregated data backups
Cathy Miron, CEO of data backup firm eSilo, emphasizes the importance of preparedness. Her company offers cloud-based and on-site data storage with a 100% ransomware recovery rate. She shared an example of a client using a mobile broadband router to access backup data during a network shutdown.
The key takeaway is the importance of having contingency plans. As Halvor Molland from Norsk Hydro suggests, companies should expect to potentially become victims of cyber-attacks and develop strategies to keep operations running.
Experts recommend:
– Practicing manual workarounds
– Maintaining physical copies of critical information
– Developing flexible communication strategies
– Investing in robust data backup solutions
While digital systems remain primary, the ability to quickly switch to alternative methods can be crucial in maintaining business continuity during unexpected technological disruptions.
