Cyberattacks are no longer just an information technology problem. They’ve become a board-level business continuity crisis, forcing enterprises to rethink cyber resilience strategy from the storage layer up.

As cyber resilience strategy evolves from a compliance checkbox into an operational imperative, companies are discovering that immutable backups alone are no longer enough. Boardroom discussions are increasingly focused on recoverability and business continuity rather than simply verifying that backups exist, according to Leerun Laizerovich (pictured, right), associate vice president of partner technical solutions and design at Commvault Systems Inc.

“In the past, chief security officers and chief financial officers were really asking, ‘Do we have an immutable backup?'” he said. “How it’s changed now is that it’s become more of a board-level discussion. The board is starting to change that landscape and asking, ‘Can we recover, and how fast can we get there?’ Naturally, the CSO is becoming the chief recovery officer in tandem.”

Laizerovich and Brandon Willitts (left), director of product management at Everpure Inc., spoke with theCUBE’s Christophe Bertrand and Alison Kosik at Pure Accelerate 2026, during an exclusive broadcast on theCUBE, SiliconANGLE Media’s livestreaming studio. They discussed cyber resilience strategy, the accelerating threat landscape and what enterprise teams must do differently to achieve genuine recoverability. (* Disclosure below.)

Cyber resilience strategy turns storage into active defense

Perimeter-first security strategies are proving insufficient as threat actors increasingly move laterally through enterprise environments and target the data layer directly. The Commvault and Everpure partnership is built to address that gap by integrating data protection telemetry, automation and flash-speed recovery into a unified stack — turning storage from a passive witness into an active defender.

“It used to be that perimeter defense was where we invested heavily,” Willitts said. “We didn’t have access to the data layer, but we were seeing the threat actors really moving laterally through our environment, going after the data. You want to take storage out of this passive witness role and turn it into an active defender and connect it from all the way end to end, from your network down to your storage layer.”

That approach has already proven its value in real-world attacks. For example, a Fortune 100 company suffered a wiper attack in which fully authenticated adversaries—who had harvested valid credentials—deleted more than 80,000 devices without deploying malware or demanding a ransom, according to Willitts. Using layered snapshot capabilities, the joint team trained a customer engineer with no storage background to recover the business in under 30 minutes. But recovery testing must happen on a regular cadence rather than as a one-time exercise, since enterprise environments change constantly, Willitts noted.

“Backups without testing your recovery is just ransomware,” he said. “Having confidence in your recovery — because these threats come at any time of the day — that’s what we want to make sure we can deliver.”

Here’s the complete video interview, part of SiliconANGLE’s and theCUBE’s coverage of Pure Accelerate 2026:

(* Disclosure: TheCUBE is a paid media partner for the Pure Accelerate event. Neither Everpure, the sponsor of theCUBE’s event coverage, nor other sponsors have editorial control over content on theCUBE or SiliconANGLE.)

Photo: SiliconANGLE