The question that decides whether your business survives a ransomware attack isn’t if you have backups. It’s whether you could actually recover from those backups, under pressure, in a way you could prove to a regulator.
In this episode, host Rick Byrne sits down with Ray Umerley of Coveware by Veeam, a two-time ransomware survivor who now works roughly 50 cases a month. Together they walk through what the 3:30 a.m. phone call really looks like, why the first thing that fails is usually the team and not the system, and why resilience has more in common with managing a forest than buying a bigger hose.
In this episode:
Why “do we have backups?” is the wrong question, and what proven recoverability means instead
Inside the 3:30 a.m. call: what actually happens in the first 48 hours of a ransomware event
Why incident response, backup and continuity teams meeting for the first time mid-attack is the norm, not the exception
The forest-fire frame for resilience, and the one question to ask your team this week
Featuring Ray Umerley, Field CISO at Coveware by Veeam. Hosted by Rick Byrne, Director of Systems Engineering, Veeam Canada.
Coveware, now part of Veeam, publishes a free quarterly report on what they’re seeing across hundreds of real ransomware cases. Read the latest at coveware.com/blog.
#Ransomware #CyberResilience #DataProtection #CanadianBusiness #Cybersecurity #BackupAndRecovery #veeam
Show Notes & Resources:
Coveware by Veeam — quarterly ransomware reports: https://www.coveware.com/blog
Bill C-8, An Act respecting cyber security (Critical Cyber Systems Protection Act): C-8 (45-1) – LEGISinfo – Parliament of Canada
Veeam: Solving Impossible AI & Data Challenges (visit us at https://www.veeam.com)
Concepts referenced: proven recoverability vs. assumed recoverability; DFIR (digital forensics and incident response); full timed restore testing vs. tabletop exercises
Guest: Ray Umerley, Field CISO, Coveware by Veeam
Host: Rick Byrne, Director of Systems Engineering, Veeam Canada
