It-sa Expo&Congress 2025: How companies can remain operational even in times of crisis

Geopolitical crises increase pressure on companies. Learn how cyber resilience, clear processes, and well-coordinated teams help you remain operational even in an emergency.

Written by Markus Zeischke

Graphic representation of a digital globe with the text “Cyber Resilience” in the center, surrounded by five symbols from the fields of technology, innovation, security, law, and artificial intelligence

Global tensions, hybrid threats, and new attack scenarios are increasing the demands on cyber resilience. Today, companies must be able to respond quickly, in a coordinated and proactive manner, not only to targeted attacks but also to large-scale disruptions. The it-sa Expo&Congress 2025 has shown that resilience means more than just IT security. It is created through the interaction of people, processes, and technologies, as well as the ability to learn from every incident.

How well prepared are companies for cyberattacks in the context of geopolitical tensions?

Cyber resilience is not a one-time project; it must be developed proactively, in a structured and team-oriented manner. Early warning systems, clear processes, and coordinated teams determine how well companies can respond to attacks—especially in times of geopolitical uncertainty.

These points turn preparation into true resilience:

Early warning systems and standardized processes minimize damage
Combining IT and OT security increases overall resilience
Social engineering remains a key attack vector—even in a crisis context

In these articles from it-sa Expo&Congress 2025, you will find exciting insights and practical examples:

What role does cyber resilience play in strategic planning?

Resilience is no longer purely an IT issue. It is a strategic competence that combines governance, compliance, and business continuity. Companies that integrate cyber resilience into their strategic planning from the outset lay the foundation for sustainable security and adaptability. Among other things, the following points are important here:

BCM and IT resilience must go hand in hand.
Regulatory requirements such as NIS2 and DORA shape processes and structures.
Lessons learned from crisis scenarios are directly incorporated into strategic planning.

Deepen your knowledge with these articles from it-sa Expo&Congress 2025:

How well prepared is your incident response team for an emergency?

When an emergency occurs, every second counts. Only a well-coordinated team with clear processes can respond quickly, safely, and effectively. Automation can help, but it cannot replace human expertise. These factors are crucial:

SOC and CERT must work closely together
Automation creates efficiency, but it cannot replace experience.
Clear communication channels speed up decision-making

Find out more in these articles from it-sa Expo&Congress 2025:

How quickly could you respond to a large-scale IT failure?

Total failures are no longer a hypothetical risk; they are real. Speed determines your ability to act. Regular exercises and tested backup strategies ensure the survival of your company in an emergency. You should pay attention to the following points:

Backup and recovery plans must be tested regularly.
Crisis simulations increase teams' stress resilience.
Automation creates efficiency, but it cannot replace human leadership.

These contributions from it-sa Expo&Congress 2025 offer valuable insights:

What lessons were learned from past crisis situations?

Every crisis provides valuable insights when systematically evaluated and implemented. Companies that learn from incidents continuously increase their resilience and turn weaknesses into strengths. This is how learning becomes a factor for success:

Collaboration with partners increases collective resilience.
Lessons learned must be documented, evaluated, and integrated.
Resilience is a continuous improvement process.

Find out more in these articles from it-sa Expo&Congress 2025:

Remaining capable of acting, even in a crisis

The it-sa Expo&Congress 2025 has shown that companies that strategically embed resilience remain confident even in exceptional situations. Draw on these three insights, among others:

Proactive resilience instead of reactivity: Only those who are prepared can act quickly and correctly in crises.
People, processes, and technology must work together: Automation alone is not enough—well-coordinated teams are crucial.
Learning from incidents: Every crisis sharpens strategies, training, and systems—if it is analyzed correctly.

Cyber resilience is not a project, but a strategic capability. Companies that continuously improve their processes, technologies, and teams remain capable of acting—even in times of geopolitical uncertainty.

Related Links

Deepen your knowledge and stick with it – your resources at it-sa 365

The threat landscape is dynamic. Continuous training is the best protection. As a member of the it-sa 365 community, you get exclusive access to knowledge, contacts, and solutions related to IT security:

Networking with peers and leading experts
Exclusive content and advance information
Personalized news feeds with relevant topics
Direct line to solution providers

Exchange ideas with like-minded people, stay informed about current cyberattacks, defense strategies, and new technologies such as AI, and benefit from a community that supports you throughout the year.

Author

Markus Zeischke

IT-Autor & Senior Content Manager

The Digitale