Preparing for the Next Worldwide Tech Outage
CIOs can take steps now to reduce risks associated with today’s IT landscape
CIOs can take steps now to reduce risks associated with today’s IT landscape
As tech leaders race to bring Windows systems back online after Friday’s software update by cybersecurity company CrowdStrike crashed around 8.5 million machines worldwide, experts share with CIO Journal their takeaways for preparing for the next major information technology outage.
IT leaders should hold vendors deeply integrated within IT systems, such as CrowdStrike , to a “very high standard” of development, release quality and assurance, said Neil MacDonald , a Gartner vice president.
“Any security vendor has a responsibility to do extensive regression testing on all versions of Windows before an update is rolled out,” he said.
That involves asking existing vendors to explain how they write software, what testing they do and whether customers may choose how quickly to roll out an update.
“Incidents like this remind all of us in the CIO community of the importance of ensuring availability, reliability and security by prioritizing guardrails such as deployment and testing procedures and practices,” said Amy Farrow, chief information officer of IT automation and security company Infoblox.
While automatically accepting software updates has become the norm—and a recommended security practice—the CrowdStrike outage is a reminder to take a pause, some CIOs said.
“We still should be doing the full testing of packages and upgrades and new features,” said Paul Davis, a field chief information security officer at software development platform maker JFrog . undefined undefined Though it’s not feasible to test every update, especially for as many as hundreds of software vendors, Davis said he makes it a priority to test software patches according to their potential severity and size.
Automation, and maybe even artificial intelligence-based IT tools, can help.
“Humans are not very good at catching errors in thousands of lines of code,” said Jack Hidary, chief executive of AI and quantum company SandboxAQ. “We need AI trained to look for the interdependence of new software updates with the existing stack of software.”
An incident rendering Windows computers unusable is similar to a natural disaster with systems knocked offline, said Gartner’s MacDonald. That’s why businesses should consider natural disaster recovery plans for maintaining the resiliency of their operations.
One way to do that is to set up a “clean room,” or an environment isolated from other systems, to use to bring critical systems back online, according to Chirag Mehta, a cybersecurity analyst at Constellation Research.
Businesses should also hold tabletop exercises to simulate risk scenarios, including IT outages and potential cyber threats, Mehta said.
Companies that back up data regularly were likely less impacted by the CrowdStrike outage, according to Victor Zyamzin, chief business officer of security company Qrator Labs. “Another suggestion for companies, and we’ve been saying that again and again for decades, is that you should have some backup procedure applied, running and regularly tested,” he said.
For any vendor with a significant impact on company operations , MacDonald said companies can review their contracts and look for clauses indicating the vendors must provide reliable and stable software.
“That’s where you may have an advantage to say, if an update causes an outage, is there a clause in the contract that would cover that?” he said.
If it doesn’t, tech leaders can aim to negotiate a discount serving as a form of compensation at renewal time, MacDonald added.
The outage also highlights the importance of insurance in providing companies with bottom-line protection against cyber risks, said Peter Halprin, a partner with law firm Haynes Boone focused on cyber insurance.
This coverage can include protection against business income losses, such as those associated with an outage, whether caused by the insured company or a service provider, Halprin said.
The CrowdStrike update affected only devices running Microsoft Windows-based systems , prompting fresh questions over whether enterprises should rely on Windows computers.
CrowdStrike runs on Windows devices through access to the kernel, the part of an operating system containing a computer’s core functions. That’s not the same for Apple ’s Mac operating system and Linux, which don’t allow the same level of access, said Mehta.
Some businesses have converted to Chromebooks , simple laptops developed by Alphabet -owned Google that run on the Chrome operating system . “Not all of them require deeper access to things,” Mehta said. “What are you doing on your laptop that actually requires Windows?”
Following the successful launch of its Palais Collection, MAISON de SABRÉ has unveiled a new modular handbag system offering more than 720 styling combinations.
Automobili Lamborghini and Babolat have expanded their collaboration with five new colourways for the ultra-exclusive BL.001 racket, limited to just 50 pieces worldwide.
With US$40 million already committed, the Global Talent Fund is attracting investor attention with a strategy focused on building globally scalable consumer brands alongside high-profile talent.
A new investment fund targeting celebrity-founded consumer brands has secured US$40 million in commitments and is rapidly approaching its US$50 million fundraising target, signalling growing investor appetite for alternative opportunities beyond traditional asset classes.
The Global Talent Fund, which has a maximum raise of US$100 million, focuses on building and investing in consumer businesses alongside celebrities, athletes, and influential personalities who play an active role as co-founders rather than simply endorsing products.
The strategy is based on the belief that changes in consumer behaviour, particularly the rise of social media and digital engagement, have fundamentally altered how brands are built and scaled.
GTF founding partner Jeremy Hunt, who is helping lead the fund’s strategy, said consumers increasingly feel connected to personalities they follow online and are more willing to support products developed by those individuals.
“Consumers are searching for content to engage with, and when a celebrity they like or follow takes them on the journey of creating a product or brand, they genuinely feel part of that process,” he said.
The fund is targeting high-growth consumer sectors including wellness, hydration, beauty and recovery, areas Hunt believes continue to benefit from strong global demand and ongoing innovation.
Rather than backing celebrity endorsement deals, the fund is seeking businesses where talent is deeply involved in product development, brand creation and long-term growth.
According to Hunt, authenticity remains one of the biggest differentiators between successful celebrity-backed brands and those that fail.
“The consumer can see clearly if someone is simply being paid to promote a product,” he said. “The winners are typically the brands where the celebrity has genuinely helped build the business from the ground up.”
The model has attracted support from several prominent Australian investors and business families, reflecting broader interest in alternative investments with global growth potential.
Hunt said consumer brands offered a level of tangibility that many investors found appealing.
“Consumer brands are what we touch, feel, smell and taste every day,” he said. “Our investors understand the growth potential in the model, but they also want to be part of the journey.”
The fund’s rapid progress towards its fundraising target comes amid growing recognition that celebrity influence, when combined with strong commercial execution and scalable business models, can create significant enterprise value.
With several high-profile celebrity-founded businesses generating billion-dollar exits in recent years, supporters of the strategy believe the opportunity remains in its early stages.