Business continuity planning

and apply some of those learnings within IT.

Then the other thing that we had to do was create a robust sort of BCP and DR plan because for SaaS system, there's only so much you can do.

You're not running that infrastructure, you're not responsible for the end-to-end system.

It's not like it's running on-prem.

So if Gmail is down, what do people use? And if Slack is down, then what do people use for communicating with each other? If your SSO is down, how do you have a fallback SSO? Some of these systems we had to build, And we used to do it in partnership with our identity team, which was part of security team at the time.

But we had to really design these systems because you couldn't have 30,000 people not have access to Slack or email or, you know, we had really big massive issues with SSO at the time.

So all of that we had to do as part of our BCPDR plan and then create backup systems.

So it really depends on what problem you're trying to solve.

Things are happening very fast.

It's not that you are walking somewhere with your EM or BCP binder and you're checking every page that you are doing exactly what you planned six months ago when you were sitting in the air condition and the sun was shining.

But it hit me hard.

when I was part of a big event in a big wildfire in Israel.

Okay? Most governments, by the way, have dedicated people just dealing and getting ready to pandemics.

However, in every country, without naming countries, without shaming countries, and every business, I would say the first month of the COVID-19 was a global chaos.

And no one opened their BCP plan.

No one opened their pandemic plan.

The IRP focuses on detecting the threat, containing the malware, eradicating the attacker from the network, and preserving forensic evidence for law enforcement.

Second is the BCP or Business Continuity Plan.

This is owned by the business leaders, not security.

While the security team is fighting the hackers, the BCP is how the company continues to make money.

If the automated payment portal is locked by ransomware, the BCP dictates how the accounting team will manually process invoices using paper and pen so the company does not go bankrupt.

Third is the DRP, or Disaster Recovery Plan.

This is owned by the IT operations team.