Recover in hours, not weeks. With MVC from OpenSight, you can immediately restart minimal, clean business operations: identity, communication, core applications, and data.
Cleanroom recovery: secure and isolated restart
Identity first (AD/Entra ID), then critical workloads
Most organizations are prepared for the loss of data, but not for the loss of their ability to recover. Modern attacks target not only systems, but also backups, identity, and recovery paths. As a result, everything grinds to a halt at once.
OpenSight’s Minimum Viable Company (MVC) approach helps organizations get back up and running within hours instead of weeks. Not with temporary workarounds, but with a controlled restart of the minimum essential business functions: identity, communication, core applications, and critical data. The goal is clear: to keep functioning in any scenario, based on a clean, demonstrably secure copy of what is essential.
OpenSight handles the complete execution, guidance, and verification.
A Minimum Viable Company is the smallest version of your organization that can be cleanly restarted and can carry out all critical business processes, even when everything around you has been compromised. Whereas traditional disaster recovery (DR) focuses on infrastructure, MVC focuses on business continuity: the people, systems, and data that together form the minimum level of functionality an organization needs to keep running. The concept emerged from real-world experience with large-scale ransomware incidents. Many companies discovered that their recovery plan was based on assumptions: that backups were clean, that identity was still functioning, that networks were available. Often, the opposite turned out to be true.
A Minimum Viable Company approach changes that by defining exactly, in advance:
What the minimum viable business processes are;
Which applications, datasets, and infrastructure are required for them;
How these can be restored securely and automatically in an isolated cleanroom environment.
Its strength lies in the combination of technology, process discipline, and business prioritization. Only when these three come together can you guarantee that recovery truly works. Demonstrably and tested. OpenSight helps customers with exactly this process: defining, prioritizing, and translating it into an actionable recovery plan.
The reality is that no company is fully secure anymore. Cyberattacks are faster, smarter, and more targeted than ever. In studies by ESG and Deloitte, security and IT leaders indicated that their biggest concern is no longer data loss, but operational downtime; the inability to return to a secure state quickly, cleanly, and in a controlled manner.
The OpenSight approach: from chaos to controlled recovery
OpenSight translates the international MVC methodology into a concrete five-step model tailored to organizations, with technology and processes that can be applied immediately. Every step is led, tested, and managed by OpenSight.
1. Assess: determine your minimum viability
Through a Risk Assessment, we map business processes to applications, infrastructure, and dependencies to determine which components are essential to your organization’s continuity. OpenSight carries out this assessment in full and delivers a clear MVC profile.
2. Design: from policy to recoverable architecture
We design a Recovery Architecture that enables clean, isolated, and automated recovery based on Zero Trust principles, with immutable and air-gapped copies as the foundation. OpenSight develops this architecture, tailored to your environment and risks.
3. Prove: test, verify, demonstrate
In an automated cleanroom environment, we regularly test and validate that recovery points are clean, dependencies are correct, and business processes continue to function, with automated reporting for audits. OpenSight manages the cleanroom, performs the tests, and delivers audit-ready reports.
4. Recover: restart quickly, cleanly, and in a controlled way
In the event of an incident, identity is restored first, followed by critical systems and data, so your Minimum Viable Company is operational within hours through Cleanroom Recovery and Cloud Rewind. During an incident, OpenSight is actually at the controls and guides the entire recovery process.
5. Evolve: continuously improve and demonstrate
After every test or recovery action, we optimize processes and tooling, structurally integrating ‘Rebuild’ as the seventh security function to ensure lasting cyber resilience. OpenSight continuously monitors, evaluates, and improves this together with your team.
OpenSight combines the technical depth of a security specialist with the strategic vision of a CISO partner. As an official Commvault partner, we implement the proven technologies behind Cleanroom Recovery, Cloud Rewind, and Recovery-as-Code, but we do so entirely within the context of your organization. We don’t just make sure the technology works; we make sure your board understands why it works and that you can demonstrate it. Minimum Viable Company is not a product but a philosophy: knowing what truly matters and ensuring it can always be restored. OpenSight makes that philosophy practical and actionable and provides ongoing support to help you maintain it.
Want to dive deeper into the thinking behind Minimum Viable Company? Get these documents that explore various scenarios and applications in depth:
Whitepaper “Minimum Viable Company – Restoring What Matters Most” Created in collaboration with Deloitte. Describes the business case, governance, and prioritization of minimum viability.
Cyber Resilience Handbook Practical guide with steps for monitoring, Zero Trust segmentation, and recovery governance.
ESG Economic Validation Research report that substantiates the economic impact of Cleanroom Recovery and Cloud Rewind with concrete figures.
O’Reilly Report: The Cyber Resilience Reckoning Visionary document on the role of agentic AI in recovery strategies, and why ‘rebuild’ is becoming a new security function.
Frequently asked questions
Disaster recovery is gericht op fysieke of technische uitval (zoals brand of hardwarefout). Cyber recovery gaat ervan uit dat de omgeving zelf onveilig is. Daarom herstel je eerst in een cleanroom en gebruik je alleen gevalideerde, schone herstelpunten. OpenSight faciliteert deze cleanroom volledig.
Minstens vier keer per jaar. Organisaties die Cleanroom Recovery gebruiken, voeren tests tot 30x vaker uit doordat de voorbereidingstijd minimaal is. OpenSight plant en begeleidt deze tests.
De aanpak maakt elke test en herstelactie meetbaar. Dat biedt bewijs richting toezichthouders en verzekeraars, en verlaagt de kans op sancties of hogere premies. OpenSight levert auditklare rapportages aan.
Ja. Cloud Rewind ondersteunt herstel tussen verschillende regio’s, accounts en providers. On-prem en cloud kunnen gecombineerd worden binnen één MVC-plan. OpenSight ontwerpt en beheert beide scenario’s.
Dat hangt af van de omvang van je infrastructuur en het aantal kritieke processen. De eerste stap is altijd een Risk Assessment om scope en prioriteiten vast te stellen. Deze assessment wordt uitgevoerd door OpenSight en je krijgt een duidelijk Minimum Viable Company profiel voor jouw organisatie.
Also interesting
AI Security
Get the expertise of an experienced CISO and CTO, without a permanent hire. OpenSight helps your organization achieve lasting compliance with ISO 27001, NIS2 and DORA.
Lees verder >
Awareness Training and Workshops
Your employees are your first line of defense against a cyberattack. Strong employee awareness is therefore crucial to reducing both the likelihood of an attack and its impact.
Lees verder >
CISO as a Service
Get the expertise of an experienced CISO and CTO, without a permanent hire. OpenSight helps your organization achieve lasting compliance with ISO 27001, NIS2 and DORA.
Lees verder >
Cyber Deception
Cyber Deception: with today’s lightweight agents for Endpoint protection, it almost seemed unnecessary. Yet we still get a lot of questions about it. And when we get questions, it’s time to create…
Lees verder >
Cyber Resilience Platform
In recent years, the backup market has undergone a shift. Where backup used to be mainly a way to recover from human error or resolve hardware issues, it has now become a…
Lees verder >
Cyber Resiliency & Business Continuity
Get the expertise of an experienced CISO and CTO, without a permanent hire. OpenSight helps your organization achieve lasting compliance with ISO 27001, NIS2 and DORA.
Lees verder >
Cyber Security Framework Advisory Programs
Are you implementing a cyber security framework but getting stuck? With OpenSight’s practical approach and wide-ranging experience, we can help your organization implement your cyber security framework.
Lees verder >
Endpoint and Cloud Protection
In recent years, the time an attacker needs to move further within the network after initial infiltration has decreased drastically: the average time for a cyber attack was 98 minutes in 2021…
Lees verder >
External CISO & CTO
Get the expertise of an experienced CISO and CTO, without a permanent hire. OpenSight helps your organization achieve lasting compliance with ISO 27001, NIS2, and DORA.
Lees verder >
Governance
Get the expertise of an experienced CISO and CTO, without a permanent hire. OpenSight helps your organization achieve lasting compliance with ISO 27001, NIS2 and DORA.
Lees verder >
Governance, Risk & Compliance (GRC) Tooling
In recent years, the time an attacker needs to move further within the network after initial infiltration has decreased drastically: the average time for a cyber attack was 98 minutes in 2021…
Lees verder >
Human Risk Management+ (HRM+)
Cybercriminals are increasingly using social engineering and phishing to deceive employees. This makes human behavior the weakest link in cybersecurity. Human Risk Management+ (HRM+) from OpenSight helps organizations turn this vulnerability into…
Lees verder >
Identity protection
Get the expertise of an experienced CISO and CTO, without a permanent hire. OpenSight helps your organization achieve lasting compliance with ISO 27001, NIS2 and DORA.
Lees verder >
MDR & EDR
Get the expertise of an experienced CISO and CTO, without a permanent hire. OpenSight helps your organization achieve lasting compliance with ISO 27001, NIS2 and DORA.
Lees verder >
Microsoft 365 Compliance & Recovery
Microsoft 365 has taken off enormously in recent years, and with the arrival of Copilot, that growth is certainly expected to continue. While Microsoft is responsible for the infrastructure, users and organizations…
Lees verder >
Minimum Viable Company (MVC)
Recover in hours, not weeks. With MVC from OpenSight, you can immediately restart minimal, clean business operations: identity, communication, core applications, and data.
Lees verder >
NIS2 Audit
The NIS2 European regulation is just around the corner. This legislation will take effect in October 2024, and even though some details are still unknown, one thing is certain: we will be…
Lees verder >
Pentest
Get the expertise of an experienced CISO and CTO, without a permanent hire. OpenSight helps your organization achieve lasting compliance with ISO 27001, NIS2 and DORA.
Lees verder >
Phishing Simulation
Get the expertise of an experienced CISO and CTO, without a permanent hire. OpenSight helps your organization achieve lasting compliance with ISO 27001, NIS2 and DORA.
Lees verder >
Protection & Recovery For Your Identity
Today’s attacks no longer rely on malware alone. More and more often, your actual identity is used to carry out an attack. To quickly detect, remove, and recover from these attacks, OpenSight…
Lees verder >
Security awareness
Get the expertise of an experienced CISO and CTO, without a permanent hire. OpenSight helps your organization achieve lasting compliance with ISO 27001, NIS2 and DORA.
Lees verder >
Sovereign data storage
Get the expertise of an experienced CISO and CTO, without a permanent hire. OpenSight helps your organization achieve lasting compliance with ISO 27001, NIS2 and DORA.
Lees verder >
Zero Trust
Get the expertise of an experienced CISO and CTO, without a permanent hire. OpenSight helps your organization achieve lasting compliance with ISO 27001, NIS2 and DORA.
Lees verder >
Zero Trust
Zero Trust is a major development in the world of Cyber Security. However, Zero Trust is not a solution; it is a security model based on the principle of ‘’never trust, always…
Lees verder >
Zero Trust for Cyber Asset Attack Surface Management
CAASM (Cyber Asset Attack Surface Management) enables IT managers to gain insight into coverage and hygiene levels across their entire IT environment.
Lees verder >
Zero Trust for Users
OpenSight offers a comprehensive solution to protect your organization against cyberthreats while enabling seamless and secure access to applications and data.
Lees verder >
Zero Trust for Workloads
OpenSight offers a Zero Trust solution designed to protect your organization’s workloads against cyber threats.
Lees verder >
1/1
Why OpenSight?
Our focus is on delivering tailored cybersecurity solutions based on the organization’s risk profile. In our view, cybersecurity is not about technology alone; it is a combination of people, processes and technology, where technology should support the organization in achieving its objectives. Because we build long-term partnerships with our clients, we are not interested in short-term revenue, but in taking the journey together toward a risk profile that helps the client grow sustainably.
Er worden cookies gebruikt om functionaliteiten op de website mogelijk te maken, statistieken bij te houden, gebruikersvoorkeuren op te slaan en voor marketingdoeleinden.