Prevention and Recovery Together
Explain why prevention and recovery are complementary rather than redundant, and identify the gap created by choosing only one.
Module 5 of 7
0 of 7 complete0%
Two different jobs
Prevention lowers the odds. Recovery lowers the cost.
They address risk from opposite ends — one reduces the likelihood of an incident, the other reduces what it costs when one occurs.
Protecting the environment means monitoring, defending, hardening, and responding to threats. Protecting the data means keeping information recoverable when an event occurs despite those defenses. The two services are not interchangeable — each fills a gap the other leaves open.
02
What each side is responsible for
Primary goal
Prevention (environment)
Reduce the likelihood of an incident.
Recovery (data)
Reduce the impact when one occurs.
Works by
Prevention (environment)
Monitoring, detection, hardening, filtering, and response.
Recovery (data)
Encrypted backups, verification, and tested restoration.
Fails when
Prevention (environment)
A novel threat or a convincing request gets through.
Recovery (data)
Copies are unverified, unmonitored, or reachable by the attacker.
Alone, it leaves
Prevention (environment)
No path back if prevention is defeated.
Recovery (data)
Repeated incidents and avoidable downtime.
03
What each gap looks like in practice
What happens
Prevention only, no real recovery
One day something gets through, and there is no path back.
Recovery only, no real prevention
The underlying openings stay open, so incidents recur.
The cost
Prevention only, no real recovery
Recovery decisions — including whether to pay — get made under pressure.
Recovery only, no real prevention
Every event costs days of restoration work that prevention would have avoided.
The hidden exposure
Prevention only, no real recovery
A single ransomware hit becomes an existential event, not a bad week.
Recovery only, no real prevention
Data may be recoverable but has already been copied out.
Learn more: no solution eliminates all riskLearn more
Even well-protected environments experience ransomware, hardware failure, and unexpected data loss. Services strengthen security and resilience, but they do not eliminate risk entirely. That is precisely why prevention and recovery are designed to work together rather than one standing in for the other.
04
Stronger together
Protection and recovery do not have to move in lockstep — but neither should be missing.
What to remember
Four ideas worth carrying forward
- Prevention lowers the odds of an incident; recovery lowers the cost of one.
- Prevention without recovery turns one bad day into an existential event.
- Recovery without prevention means paying the restoration cost over and over.
- No service eliminates risk, which is why both directions of defense are needed.
Terms used in this module
Select a term to read its definition without leaving this page.
- Defense in Depth
Finished this module?
Mark it complete to save your progress, or continue without marking it complete.