No Identity, No Recovery: Cyber Resilience Starts With IAM
Dark Reading, Monday, October 12th, 2026
Identity infrastructure is a prerequisite for ransomware recovery, and identity and BCDR teams need to plan it together.
Data and application recovery plans are useless if staff cannot authenticate because the identity infrastructure is down, as the Maersk NotPetya incident showed when a single surviving domain controller made rebuilding possible.
Omdia research shows the average enterprise uses about 1,200 applications and frequently runs multiple identity providers, including CIAM and merger-driven workforce IdPs.
Identity teams also face configuration drift and admin errors that can halt operations.
The article argues that identity resilience requires restoring components in the right order with their upstream and downstream dependencies, not just backing up the IdP to meet RTOs and RPOs.