How to build an IT infrastructure capable of surviving even the most severe cyberattack

On 28 May, Bishkek hosted a closed business dinner for IT executives, organized by the system integrator Green Light with the support of the distributor MONT TECH Kyrgyzstan. The main topic was business protection strategies under conditions of continuous cyberattacks and outages. The presentations by VMware and Commvault experts reveal a clear shift in corporate technology: for CIOs and CISOs it is no longer enough simply to design large-scale data storage - business demands that digital fortresses be built.

Today infrastructure has evolved from a set of servers into managed ecosystems - the market is undergoing a transition from passively keeping systems running to the concept of proactive cyber resilience.

Private cloud as a philosophy, not a server room

For a long time companies tried to find a balance between the flexibility of public clouds and full control over data in their own data centers. Regional Solution Engineer MBCOM (VMware) Denis Shulepov showed a way to avoid this trade-off. A private cloud is an operating model and an approach to resource management, not a physical location of equipment. The VMware Cloud Foundation 9.0 platform implements this model, combining compute resources, storage, network and security in a single software-defined environment.

1 / 2

Regional Solution Engineer MBCOM (VMware) Денис Шулепов

Modern IT infrastructure provides developers with compute resources on demand through a self-service catalog. The system takes over the routine, automatically deploying services and managing the software lifecycle (updates, patching, configuration).

The focus of management shifts to proactive visibility and control:

• Cost transparency. The system allows the CIO to see the volume of resource consumption by each department, control budgets and implement accurate internal billing - both in the chargeback format (actually charging costs to business units) and showback (visibility of expenses without an actual charge).
• Versatility. The platform runs traditional applications, modern container services and artificial intelligence workloads in a single environment.
• Isolation and sovereignty. The concept of virtual private clouds (VPC) reliably separates the networks of different departments. To protect against internal threats and lateral movement of attacks, VMware vDefend is deployed - a comprehensive security tool that includes microsegmentation, distributed firewalling, intrusion detection and prevention (IDS/IPS), as well as malware detection. If an attacker penetrates one segment, the system blocks their further spread.

The trend toward private artificial intelligence (Private AI) was highlighted separately. Corporations are adopting neural networks, yet they avoid passing trade secrets to external public algorithms. The VMware Private AI Foundation architecture, together with NVIDIA, makes it possible to securely deploy AI models on their own equipment, fully preserving confidentiality.

The ResOps era: rethinking backup

An infrastructure with perfect perimeter protection remains vulnerable to targeted attacks. Commvault Regional Sales Director for the CIS, Turkey and the Baltic states Ivan Zasokhlin outlined the shift of focus from classic backup to the concept of ResOps (Resilience Operations) - a continuous discipline that brings together operations teams, infrastructure engineers and the security function for end-to-end management: from data discovery and protection to rapid recovery.

Today the effectiveness of technology departments is assessed against new criteria. First and foremost these are the speed of returning critical systems to service and the guarantee that data is cleared of malicious code. At the same time, experts emphasize: classic disaster recovery methods are insufficient against modern cyberattacks - they need to be complemented by full-fledged Cyber Recovery focused on guaranteed clean data recovery.

The main dilemma in recovering from a ransomware attack is the choice between data loss and the risk of reinfection. Companies either roll the system back several days to be sure the virus is eliminated, or restore yesterday's copy, risking that the embedded code is reactivated.

1 / 2

Региональный директор по продажам Commvault в СНГ, Турции и странах Балтии Иван Засохлин

Commvault solves this problem with Synthetic Recovery technology based on artificial intelligence. The system does not restore the infected data set in its entirety from a single backup copy. The AI analyzes individual files from different recovery points, identifies the latest "healthy" versions and automatically reconstructs a current and safe data set from them. The process eliminates manual work, requires no scripts and minimizes losses for the business.

Invisible data is vulnerable data

The second key trend in protection is control over the lifecycle of data access. The Commvault Cloud Unity platform uses DSPM tooling (data security posture management), which automatically finds confidential information scattered across the corporate network, classifies it and assesses access risks. An important independent element of this strategy is Identity Resilience - protection of corporate accounts (Active Directory, Entra ID, Okta) with real-time monitoring, automatic rollback and recovery after compromise, without which it is impossible to guarantee the security of data access.

To protect files, CISOs and security specialists need deep context. Thanks to integration with the Satori platform, which provides active control over data access, the infrastructure maintains a detailed audit of database queries in real time, making it possible to control and restrict access to confidential information. The event log conveys a clear picture of what is happening: which analyst requested the information, what the access parameters were and which sensitive tables they addressed. Early detection of anomalies in user behavior serves as the main tool for preventing disasters.

The corporate IT solutions market has definitively moved from a race for speed to a survivability strategy. Reliable infrastructure today is a symbiosis of compute power, deep automation and a Zero Trust architecture based on continuous identity verification, data immutability, network segmentation and encryption at every level of the corporate infrastructure.

1 / 3

If you want to build a fault-tolerant infrastructure and ensure uncompromising protection of corporate data, leave a request or contact us using the details provided - and Green Light specialists will help you select the optimal configuration of VMware and Commvault solutions for your business needs.