Commvault Assesses Cyber Resilience with AI-Driven Attack Simulations

Post Views: 5

Commvault introduces AI-driven attack simulations to assess cyber resilience through real-world scenarios.

Commvault’s New Approach to Cyber Resilience

Commvault has introduced a novel approach to assessing cyber resilience through AI-powered attack simulations designed to evaluate an organization’s ability to recover from sophisticated threats. The initiative, termed Minutes to Recovery, enables security and IT teams to engage in a hands-on, scenario-based exercise that mirrors the rapid evolution of modern cyberattacks. By simulating real-world conditions, the program challenges participants to navigate the complexities of defending against and recovering from AI-driven incidents under time constraints. The urgency of this capability is underscored by the shrinking window between vulnerability discovery and active exploitation. In 2025, this timeframe has been reduced to 29 minutes, a 65% decrease compared to the previous year. This acceleration necessitates a shift from traditional recovery planning to measurable, actionable preparedness.

The Three Phases of the Simulation

The simulation spans three distinct phases, each requiring participants to assume critical roles in the cyber incident lifecycle. In the first phase, attendees adopt the perspective of an adversary, leveraging commonly used frontier AI tools to construct an AI-powered attack. This phase provides insights into the speed, personalization, and targeting strategies employed by threat actors, including the rapid exploitation of backup systems. The second phase transitions participants into the role of defenders, where they must make real-time decisions with limited information and competing priorities to mitigate the attack. The final stage involves recovery operations, requiring teams to restore systems and data to a verified secure state without reintroducing the threat. Through this immersive process, teams gain a comprehensive understanding of the technical and operational challenges inherent in each phase of an incident. The exercise highlights gaps in cross-functional coordination and identifies weaknesses in existing recovery protocols.

Quotes and Testimonials

Anna Griffin, Chief Market Officer at Commvault, highlighted the importance of this shift in perspective: “The question organizations must address is no longer whether they have a recovery plan, but whether they can demonstrate its effectiveness under real-world conditions.”

Allen Downs, Vice President of Security and Resiliency at Kyndryl, emphasized the growing complexity of cyber threats: “Organizations often believe they are prepared until they face a real-time incident. Recovery strategies must evolve to match the speed and sophistication of modern attacks.”

Global Availability and Industry Impact

The program is available globally through onsite sessions and will also be offered via Commvault’s partner network. This expansion allows partners to facilitate resilience assessments for clients, fostering strategic discussions around preparedness. Kyndryl’s involvement underscores the program’s potential to strengthen organizational readiness, validate resilience frameworks, and enhance recovery capabilities. The initiative aligns with broader industry efforts to address the challenges posed by AI-enabled cyber threats, ensuring that enterprises can respond effectively to disruptions.

Conclusion

The program’s focus on practical, scenario-based training reflects a growing recognition that resilience is not defined by the existence of plans but by the rigor of their testing. As AI continues to reshape the threat landscape, tools like Minutes to Recovery offer a critical pathway for organizations to build confidence in their ability to recover swiftly and securely.