Apr 10, 2025
.jpg)
One of the largest IT outages ever happened on July 19. A now-infamous CrowdStrike update caused chaos across the globe as 8.5 million business computers that had updated their software suddenly saw the so-called blue screen of death. While some businesses recovered quickly and were able to resume operations, others were not so lucky.
You may know the background: CrowdStrike provides cybersecurity services to Windows-based computer systems. The incident occurred when the company issued a flawed update to its CrowdStrike Falcon Sensor platform. How did that happen? There seems to have been a logic error that caused the application to fail. Such consequences of flawed control processes are not unheard of but are usually not so dramatic.
The event provides businesses with a reminder to reassess their cybersecurity protocols. Companies should review the following as they seek to improve their protocols and procedures:
1. Reassess automatic updates. Automatic updates are intended to ensure security updates are installed quickly and easily. End users rely on vendors to test those updates before they are launched automatically to be sure they are safe. But the CrowdStrike failure raises the question of whether it would be better to have the company's IT department test all updates and patches on a test server and then manually install the updates at the company level.
2. Revisit cloud strategy. As we have seen, relying on a single cloud provider — whether CrowdStrike, Microsoft Azure, AWS or Google — can result in far-reaching problems. This may be the time to consider switching to a different approach, such as a hybrid cloud environment in which public clouds, such as those mentioned above, are combined with private clouds, either hosted by the company itself or a third-party provider.
3. Vet vendors. In a world with bad actors and deep fakes, cybersecurity is increasingly important. Consequently, due diligence with a software vendor should be expanded to include questions concerning how updates are tested, verified and rolled out; how data privacy protocols are maintained; and what disaster recovery systems are offered.
4. Create backup communication systems. The CrowdStrike failure disrupted Delta airlines for five days in part because the company could not communicate with its flight crews. This highlights the necessity of having backup communication systems. Companies need to be able to reach employees in the event of a company-wide tech disruption.
5. Ensure applicable disaster recovery and business continuity plans. Companies should assess their cybersecurity-related disaster recovery and business continuity plans. Part of this endeavor should include reviewing whether it is possible to roll back to previous working versions of critical software, which can decrease any downtime.
It is critical to remember that when a cybersecurity breach happens, bad actors are ready to take advantage of businesses harmed by the event. Never respond to phone calls or emails supposedly from the vendor whose software went down. Instead, reach out through official channels to verify the communication's authenticity.
The CrowdStrike event was significant, widespread and disruptive to many businesses. Companies need to look at it as an example of what can happen if a company is not prepared for an IT disruption.
©2025
Sep 24, 2026
Employers are painfully aware that they face a 21st-century skills shortage. Companies are bent on hiring a "new collar" workforce to keep up with advances in technologies like artificial intelligence and automation. Read through to learn about an untapped resource.
Sep 23, 2026
If you're having a problem with the IRS, you have rights! For one, you don’t have to go it alone. You are allowed to have an expert in your corner. Read through for details on the regulations that protect you.
Sep 22, 2026
Inflation is a key challenge that businesses of every size face when developing compensation strategies. Read through to see how your business can position itself in the competitive wage war to attract and retain employees.
Sep 21, 2026
The gig economy, characterized by companies hiring short-term, contract or freelance workers, has been surging since the 2020 pandemic when people were mandated to work remotely. By current estimates, one-third of American workers are doing some form of gig work. Read through to learn more about what this arrangement is doing to traditional payroll structures.
Aug 27, 2026
The pandemic reshaped how and where work gets done, disrupting the U.S. office market and accelerating the shift toward remote and hybrid models. While return-to-office efforts have focused on productivity, collaboration and culture, they have also been influenced by practical concerns such as long-term leases and underused office space. Read through to see how hybrid work continues to evolve.
Aug 26, 2026
Your company has terminated an employee — and now you're bracing for what they might say about their former workplace online. Social media can turn a disgruntled former worker into a very public critic. Read through for an overview of ways to prevent disparagement through culture and policy, deter it with a nondisparagement clause and respond to it with legal help.
More News & Press can be found in our Archive.
