The Dangerous Illusion of Cyber Readiness | Cyber & AI Perspectives

Dejan Kosutic explains that while many companies believe they are prepared for disruptive incidents, their continuity and recovery plans alone are often insufficient. He argues that plans cannot replace missing resources such as redundant systems, properly secured backups, or replacement staff, and that unclear recovery time and data loss tolerances lead to misaligned preparations. He also notes that complex dependencies across people and systems can cause recovery steps to fail, and that real incidents create chaos where people may react irrationally. Kosutic recommends defining business continuity strategies using RTOs and RPOs, mapping dependencies across processes, systems, suppliers, and regularly exercising plans with realistic scenarios involving senior management and key suppliers, referencing frameworks like ISO 22301.LINKS FROM THE EPISODE: ► Responding to Ransomware Attack [Case Study] | Interview with Yannick Hirt | EP29 https://www.youtube.com/watch?v=V3DhNF9-wfc► Cyber Ranges, Attack Simulations & AI: Proving Cyber Readiness | Interview with Lee Rossey | EP32 https://www.youtube.com/watch?v=zId18MlZeKM (00:00) - The Dangerous Illusion of Cyber Readiness (00:45) - Why plans alone are not enough? (03:09) - How to build true cyber resilience (04:21) - The real goal: Resilience