More from the article...

... The incident related to a software update that caused a widespread outage to Microsoft systems, resulting in grounded flights and disruptions to other major industries.

To gain different perspectives, Digital Journal reached out to three leading cybersecurity experts to garner a new take on the situation.

Vendors are still suffering impacts

First up is Jake Williams: former NSA hacker, Faculty at IANS Research, a Boston-based cybersecurity research and advisory firm, and VP of R&D at Hunter Strategy.

Williams begins [by] assessing the shockwave: "Vendor management teams should take inventory of which of their vendors are still suffering impacts from the CrowdStrike event. This will be important for future Business Continuity Plan (BCP) planning. If an organization can't recover quickly from a relatively simple fix like this, they will fare far worse if hit with ransomware."

This leads to Williams' substantive point -- the need for businesses to be ready for any eventuality: "One of the most important things you can do for your security program this week is to proactively discuss security controls with your stakeholders. Acknowledge that automatic content (signature) updates pose a risk, but delaying those updates is an even greater risk." ...

@#2 ... It all depends on how good their IT departments were and how well they were funded. ...

Absolutely, with an emphasis upon the latter part of your comment.

Funding.

When I was in IT, I always had a battle to get the funds I needed.

But then one thing occurred... we were attacked and we lived through the attack. I then was able to show a direct link between the funds allocated the prior years and the protection those funds provided to allow us to survive the attack. Subsequent to that event, it was a bit easier to get funds.

Not all IT teams are that lucky, as IT is typically seen as a cost-center in companies, and nothing to do with generating profits.