Transcript
So what I like about MVC is minimum viable company is what are the minimum number of things that I need? What are those very specific things to run the business? Right. I need my ERP to be up and running. What does that mean? Our website needs to be up and running. What does that mean? It needs to interact with our ERP so we can check constantly check inventory. What does that actually mean to us? Right. How do we reconcile lost transactions? How do we reconcile lost time? How do we manage the identity system that may have been compromised six months before the encryption occurred, before the security event was noticed? Right. And and thus those accounts may still exist. And then you start the investigation. At the same time you're trying to do some sort of triage. What's down? What's broken? How bad is this? Is this currently? Right. What do we think this is? The reason investigation is important is you're trying to figure out how long have they been in your environment. It's a critical piece of information to recovery. And immediately you start kicking off. What are we what is our fail over if any? And how do we get back up and running? So you actually have a separate tiger team developed to get MVC back up. Once that's up and running then that team moves right back over to incident response and you continue the incident response. All the investigative integrity is maintained. All the evidentiary integrity is maintained. All of that stuff can still continue and is part of the feedback loop that you use for the long-term repairs. While the business, the minimum viable business, however you define that, is up and running. And the neat part is it also doesn't have to be one thing. Right. You could have an MVC for the company, but you could also have an MVC for a particular piece of operations or a particular business unit. Commvault has staffed around this. They've staffed to help be your kind of consultant as they go through this and they're bringing their partner network along with them. Right. So you don't have to feel like you're all alone here. It's really critical that you have tools that make testing easy because you're effectively testing the theory of is this my minimum viable company? And I guarantee the first few times you do it, you're going to be wrong. There's a ton of configuration here. Is the juice worth the squeeze? And that's really kind of what Commvault has taken on.