Dr. Hamza Alakaleek

In today's digital world, data is the lifeblood of businesses, driving operations, decision-making, and strategic planning. However, with the rise of cyber threats and the increasing sophistication of data breaches, organizations face an ever-present risk of losing valuable information. For Jordanian companies, ensuring data resiliency is no longer a luxury but a necessity.

Data resiliency refers to an organization’s ability to quickly recover from data breaches, data loss, and other cybersecurity incidents. This includes the capacity to immediately activate business continuity plans, recover lost data and assets, and implement stringent measures to safeguard data against future threats. Simply, it is about making sure that a company can continue to function even after a cyber-attack or data loss event, minimizing downtime and financial loss.

As data privacy regulations evolve, both globally and locally, businesses are required to adhere to stringent data protection standards. Ensuring data resiliency helps Jordanian companies comply with local regulations like the Cybersecurity Law and international standards such as the General Data Protection Regulation (GDPR). Compliance not only avoids legal repercussions but also enhances the company’s credibility.

Furthermore, data breaches can result in significant financial losses, not just from the direct costs of lost or stolen data but also from operational downtime, legal fees, and potential fines. Data resiliency helps minimize these costs by enabling quicker recovery and limiting the extent of damage caused by data breaches.

To achieve robust data resiliency, Jordanian companies should adopt a proactive approach and implement comprehensive data governance strategies. Accordingly, companies should establish a data resiliency plan that outlines the steps to be taken before, during, and after a data breach. This plan should include a thorough risk assessment, clear communication protocols, a disaster recovery plan, and regular testing to ensure readiness.

Moreover, companies need to invest in advanced cybersecurity tools, such as firewalls, intrusion detection systems, and data encryption. Regular software updates and patch management are also essential to protect against vulnerabilities.

Regular backups of critical data should be conducted and stored in secure, off-site locations. Companies must also perform routine recovery tests to ensure that data can be restored quickly and accurately in the event of a breach. Thus, employees are often the first line of defense against cyber threats. Regular training on cybersecurity best practices, such as recognizing phishing attempts, using strong passwords, and adhering to data handling policies, is crucial.

In this regards, companies should form dedicated incident response teams that are responsible for managing data breaches and coordinating recovery efforts. These teams should be trained to act swiftly and efficiently in case of an emergency, minimizing the impact of a data loss event.

Data resiliency is best achieved through a multi-layered security strategy that includes network security, endpoint protection, access controls, and regular monitoring. This holistic approach ensures that even if one security layer is breached, others remain intact to protect critical data.

Additionally, cloud-based solutions provide scalable and flexible options for data storage and backup. Utilizing cloud services with robust security features can enhance data resiliency by ensuring that data is accessible and recoverable from anywhere, even if the primary systems are compromised.

Similarly, to bolster data resiliency across the Jordanian business landscape, regulatory bodies must play a proactive role in establishing clear guidelines and standards. Technology governance frameworks should mandate regular data audits, enforce compliance with data protection regulations, and encourage the adoption of best practices for data management.

Moreover, as the regulation of the NCSC required companies should report data breaches promptly, ensuring transparency and enabling quicker responses. Public and private sector collaboration is essential to foster a culture of data security and resilience, where companies of all sizes are equipped to handle data breaches effectively.

Collaboration between the government, academia, and private sectors is crucial for sharing knowledge, resources, and best practices.

Public-private partnerships can foster a culture of cybersecurity resilience and innovation, enhancing the overall security landscape.

Data resiliency is no longer optional in today's digital era; it is a fundamental requirement for any business aiming to succeed and thrive. Jordanian companies must recognize the critical importance of protecting their data assets and take proactive steps to build a robust data resiliency framework.

Ultimately, building data resiliency is about more than just protecting information—it is about securing the future of businesses and the economy, preserving trust, and ensuring that Jordanian companies can innovate, grow, and succeed in an increasingly interconnected world. The time to act is now.

The writer is a Corporate Lawyer and Tax Attorney with post-graduate degrees in International Political Economy, International Business Law, and Law and Technology with focus on (IoT, AI, DPA & CSL).