How to Build an IT Infrastructure Capable of Withstanding Even the Most Severe Cyberattack

On May 28, a private business dinner for IT executives was held in Bishkek, organized by the systems integrator Green Light with the support of the distributor MONT TECH Kyrgyzstan. The main topic was strategies for protecting businesses in the face of constant cyberattacks and outages. Presentations by experts from VMware and Commvault revealed a clear shift in corporate technology: it is no longer enough for CIOs and CISOs to simply design large-scale data storage systems - businesses now need to build digital fortresses.

Today, infrastructure has evolved from a collection of servers to managed ecosystems - the market is undergoing a transition from passive system maintenance to the concept of proactive cyber resilience.

A private cloud as a philosophy, not just a server room

For a long time, companies have been trying to strike a balance between the flexibility of public clouds and full control over data in their own data centers. Regional Solution Engineer at MBCOM (VMware) Denis Shulepov demonstrated a way to avoid this trade-off. A private cloud is an operating model and an approach to resource management, not the physical location of the hardware. The VMware Cloud Foundation 9.0 platform implements this model by integrating compute, storage, networking, and security into a single software-defined environment.

1 / 2

Regional Solution Engineer MBCOM (VMware) Денис Шулепов

Modern IT infrastructure provides developers with on-demand computing resources through a self-service catalog. The system handles routine tasks by automatically deploying services and managing the software lifecycle (updates, patching, configuration).

The focus of management is shifting toward proactive visibility and control:

• Cost Transparency. The system allows the CIO to view each department’s resource consumption, monitor budgets, and implement accurate internal billing - both in the form of chargeback (actual billing of costs to departments) and showback (transparency of expenses without actual charges).
• Versatility. The platform runs traditional applications, modern container-based services, and artificial intelligence computing in a single environment.
• Isolation and Sovereignty. The Virtual Private Cloud (VPC) concept reliably isolates the networks of different departments. To protect against internal threats and lateral movement of attacks, VMware vDefend is being implemented - a comprehensive security solution that includes microsegmentation, distributed firewalls, intrusion detection and prevention (IDS/IPS), and malware detection. If an attacker penetrates one segment, the system blocks their further spread.

A separate trend has emerged in the area of private artificial intelligence (Private AI). Corporations are implementing neural networks while avoiding the transfer of trade secrets to external, public algorithms. The VMware Private AI Foundation architecture, in collaboration with NVIDIA, enables the secure deployment of AI models on in-house hardware while fully preserving confidentiality.

The Age of ResOps: Rethinking Backup

Even infrastructure with perfect perimeter security remains vulnerable to targeted attacks. Ivan Zasokhlin, Commvault's Regional Sales Director for the CIS, Turkey, and the Baltic States signaled a shift in focus from traditional backup to the concept of ResOps (Resilience Operations) - a continuous discipline that brings together operations teams, infrastructure engineers, and security to provide end-to-end management: from data detection and protection to rapid recovery.

Today, the effectiveness of IT departments is evaluated based on new criteria. First and foremost, these include the speed at which critical systems are restored to operation and the assurance that data has been cleared of malicious code. At the same time, experts emphasize that traditional disaster recovery (DR) methods are insufficient against modern cyberattacks - they must be supplemented with a comprehensive cyber recovery solution focused on ensuring that data is restored in a clean state.

The main dilemma when recovering from a ransomware attack is choosing between data loss and the risk of reinfection. Companies either roll back their systems to a point several days ago to ensure the virus is eliminated, or restore yesterday’s backup, risking reactivation of the malicious code.

1 / 2

Региональный директор по продажам Commvault в СНГ, Турции и странах Балтии Иван Засохлин

Commvault solves this problem using AI-powered Synthetic Recovery technology. The system does not restore the entire infected array from a single backup. The AI analyzes individual files from different recovery points, identifies the latest “healthy” versions, and automatically reconstructs a current and secure data array from them. The process eliminates manual labor, requires no scripts, and minimizes business losses.

Invisible Data = Vulnerable Data

The second key trend in security is controlling the data access lifecycle. The Commvault Cloud Unity platform uses DSPM (Data Security Posture Management) tools that automatically locate sensitive information scattered across the corporate network, classify it, and assess access risks. An important standalone component of this strategy is Identity Resilience - protection of corporate accounts (Active Directory, Entra ID, Okta) with real-time monitoring, automatic rollback, and recovery after compromise - features without which secure access to data cannot be guaranteed.

To protect files, CISOs and security professionals need in-depth context. Thanks to integration with the Satori platform, which provides active data access control, the infrastructure performs a detailed, real-time audit of database queries, allowing organizations to monitor and restrict access to sensitive information. The event log provides a clear picture of what is happening: which analyst requested the information, what the access parameters are, and which sensitive tables were accessed. Early detection of anomalies in user behavior is a key tool for preventing disasters.

The corporate IT solutions market has definitively shifted from a race for speed to a strategy of survival. Today, a reliable infrastructure is a symbiosis of computing power, deep automation, and a Zero Trust architecture based on continuous identity verification, data immutability, network segmentation, and encryption at every level of the corporate infrastructure.

1 / 3

If you want to build a fault-tolerant infrastructure and ensure uncompromising protection of corporate data, Submit a request or contact us using the contact information provided - and the experts at Green Light will help you choose the optimal configuration of the VMware and Commvault solutions to meet your business needs.