Minimum Viable Company (MVC)

Recover in hours, not weeks. With MVC from OpenSight, you can immediately restart minimal, clean business operations: identity, communication, core applications, and data.

  • Cleanroom recovery: secure and isolated restart
  • Identity first (AD/Entra ID), then critical workloads
  • Demonstrably tested and audit-ready

Recover what truly matters

Most organizations are prepared for the loss of data, but not for the loss of their ability to recover. Modern attacks target not only systems, but also backups, identity, and recovery paths. As a result, everything grinds to a halt at once.

OpenSight’s Minimum Viable Company (MVC) approach helps organizations get back up and running within hours instead of weeks. Not with temporary workarounds, but with a controlled restart of the minimum essential business functions: identity, communication, core applications, and critical data. The goal is clear: to keep functioning in any scenario, based on a clean, demonstrably secure copy of what is essential.

OpenSight handles the complete execution, guidance, and verification.

A Minimum Viable Company is the smallest version of your organization that can be cleanly restarted and can carry out all critical business processes, even when everything around you has been compromised. Whereas traditional disaster recovery (DR) focuses on infrastructure, MVC focuses on business continuity: the people, systems, and data that together form the minimum level of functionality an organization needs to keep running. The concept emerged from real-world experience with large-scale ransomware incidents. Many companies discovered that their recovery plan was based on assumptions: that backups were clean, that identity was still functioning, that networks were available. Often, the opposite turned out to be true.

A Minimum Viable Company approach changes that by defining exactly, in advance:

  • What the minimum viable business processes are;
  • Which applications, datasets, and infrastructure are required for them;
  • How these can be restored securely and automatically in an isolated cleanroom environment.

Its strength lies in the combination of technology, process discipline, and business prioritization. Only when these three come together can you guarantee that recovery truly works. Demonstrably and tested. OpenSight helps customers with exactly this process: defining, prioritizing, and translating it into an actionable recovery plan.

The reality is that no company is fully secure anymore. Cyberattacks are faster, smarter, and more targeted than ever. In studies by ESG and Deloitte, security and IT leaders indicated that their biggest concern is no longer data loss, but operational downtime; the inability to return to a secure state quickly, cleanly, and in a controlled manner.

ESG’s Economic Validation Study shows that organizations with an MVC approach:

  • Can test whether a recovery plan works 99% faster;
  • Need 94% less time for a complete rebuild;
  • run recovery tests 30x more often on average, simply because it takes less time and fewer resources.

This translates directly into lower costs, lower risks, and stronger demonstrability to the board and insurers.

OpenSight translates the international MVC methodology into a concrete five-step model tailored to organizations, with technology and processes that can be applied immediately. Every step is led, tested, and managed by OpenSight.

Through a Risk Assessment, we map business processes to applications, infrastructure, and dependencies to determine which components are essential to your organization’s continuity. OpenSight carries out this assessment in full and delivers a clear MVC profile.

We design a Recovery Architecture that enables clean, isolated, and automated recovery based on Zero Trust principles, with immutable and air-gapped copies as the foundation. OpenSight develops this architecture, tailored to your environment and risks.

In an automated cleanroom environment, we regularly test and validate that recovery points are clean, dependencies are correct, and business processes continue to function, with automated reporting for audits. OpenSight manages the cleanroom, performs the tests, and delivers audit-ready reports.

In the event of an incident, identity is restored first, followed by critical systems and data, so your Minimum Viable Company is operational within hours through Cleanroom Recovery and Cloud Rewind. During an incident, OpenSight is actually at the controls and guides the entire recovery process.

After every test or recovery action, we optimize processes and tooling, structurally integrating ‘Rebuild’ as the seventh security function to ensure lasting cyber resilience. OpenSight continuously monitors, evaluates, and improves this together with your team.

Gain more control and insight into cyber risks

The Minimum Viable Company approach at OpenSight

OpenSight combines the technical depth of a security specialist with the strategic vision of a CISO partner. As an official Commvault partner, we implement the proven technologies behind Cleanroom Recovery, Cloud Rewind, and Recovery-as-Code, but we do so entirely within the context of your organization. We don’t just make sure the technology works; we make sure your board understands why it works and that you can demonstrate it. Minimum Viable Company is not a product but a philosophy: knowing what truly matters and ensuring it can always be restored. OpenSight makes that philosophy practical and actionable and provides ongoing support to help you maintain it.

Want to dive deeper into the thinking behind Minimum Viable Company? Get these documents that explore various scenarios and applications in depth:

  1. Whitepaper “Minimum Viable Company – Restoring What Matters Most”
    Created in collaboration with Deloitte. Describes the business case, governance, and prioritization of minimum viability.
  2. Cyber Resilience Handbook
    Practical guide with steps for monitoring, Zero Trust segmentation, and recovery governance.
  3. ESG Economic Validation
    Research report that substantiates the economic impact of Cleanroom Recovery and Cloud Rewind with concrete figures.
  4. O’Reilly Report: The Cyber Resilience Reckoning
    Visionary document on the role of agentic AI in recovery strategies, and why ‘rebuild’ is becoming a new security function.

Disaster recovery is gericht op fysieke of technische uitval (zoals brand of hardwarefout). Cyber recovery gaat ervan uit dat de omgeving zelf onveilig is. Daarom herstel je eerst in een cleanroom en gebruik je alleen gevalideerde, schone herstelpunten. OpenSight faciliteert deze cleanroom volledig.

Minstens vier keer per jaar. Organisaties die Cleanroom Recovery gebruiken, voeren tests tot 30x vaker uit doordat de voorbereidingstijd minimaal is. OpenSight plant en begeleidt deze tests.

De aanpak maakt elke test en herstelactie meetbaar. Dat biedt bewijs richting toezichthouders en verzekeraars, en verlaagt de kans op sancties of hogere premies. OpenSight levert auditklare rapportages aan.

Ja. Cloud Rewind ondersteunt herstel tussen verschillende regio’s, accounts en providers. On-prem en cloud kunnen gecombineerd worden binnen één MVC-plan. OpenSight ontwerpt en beheert beide scenario’s.

Dat hangt af van de omvang van je infrastructuur en het aantal kritieke processen. De eerste stap is altijd een Risk Assessment om scope en prioriteiten vast te stellen. Deze assessment wordt uitgevoerd door OpenSight en je krijgt een duidelijk Minimum Viable Company profiel voor jouw organisatie.

AI Security

AI Security

Get the expertise of an experienced CISO and CTO, without a permanent hire. OpenSight helps your organization achieve lasting compliance with ISO 27001, NIS2 and DORA.

Lees verder >

Awareness Training and Workshops

Your employees are your first line of defense against a cyberattack. Strong employee awareness is therefore crucial to reducing both the likelihood of an attack and its impact.

Lees verder >

CISO

CISO as a Service

Get the expertise of an experienced CISO and CTO, without a permanent hire. OpenSight helps your organization achieve lasting compliance with ISO 27001, NIS2 and DORA.

Lees verder >

Cyber Deception

Cyber Deception: with today’s lightweight agents for Endpoint protection, it almost seemed unnecessary. Yet we still get a lot of questions about it. And when we get questions, it’s time to create…

Lees verder >

Cyber Resilience Platform

In recent years, the backup market has undergone a shift. Where backup used to be mainly a way to recover from human error or resolve hardware issues, it has now become a…

Lees verder >

Cyber Resiliency

Cyber Resiliency & Business Continuity

Get the expertise of an experienced CISO and CTO, without a permanent hire. OpenSight helps your organization achieve lasting compliance with ISO 27001, NIS2 and DORA.

Lees verder >

Cyber Security Framework Advisory Programs

Are you implementing a cyber security framework but getting stuck? With OpenSight’s practical approach and wide-ranging experience, we can help your organization implement your cyber security framework.

Lees verder >

Endpoint and Cloud Protection

In recent years, the time an attacker needs to move further within the network after initial infiltration has decreased drastically: the average time for a cyber attack was 98 minutes in 2021…

Lees verder >

External CISO & CTO

Get the expertise of an experienced CISO and CTO, without a permanent hire. OpenSight helps your organization achieve lasting compliance with ISO 27001, NIS2, and DORA.

Lees verder >

Governance

Governance

Get the expertise of an experienced CISO and CTO, without a permanent hire. OpenSight helps your organization achieve lasting compliance with ISO 27001, NIS2 and DORA.

Lees verder >

Governance, Risk & Compliance (GRC) Tooling

In recent years, the time an attacker needs to move further within the network after initial infiltration has decreased drastically: the average time for a cyber attack was 98 minutes in 2021…

Lees verder >

Human Risk Management+ (HRM+)

Cybercriminals are increasingly using social engineering and phishing to deceive employees. This makes human behavior the weakest link in cybersecurity. Human Risk Management+ (HRM+) from OpenSight helps organizations turn this vulnerability into…

Lees verder >

Identity Protection

Identity protection

Get the expertise of an experienced CISO and CTO, without a permanent hire. OpenSight helps your organization achieve lasting compliance with ISO 27001, NIS2 and DORA.

Lees verder >

MDR & EDR

MDR & EDR

Get the expertise of an experienced CISO and CTO, without a permanent hire. OpenSight helps your organization achieve lasting compliance with ISO 27001, NIS2 and DORA.

Lees verder >

Microsoft 365 Compliance & Recovery

Microsoft 365 has taken off enormously in recent years, and with the arrival of Copilot, that growth is certainly expected to continue. While Microsoft is responsible for the infrastructure, users and organizations…

Lees verder >

Minimum Viable Company (MVC)

Recover in hours, not weeks. With MVC from OpenSight, you can immediately restart minimal, clean business operations: identity, communication, core applications, and data.

Lees verder >

NIS2 Audit

The NIS2 European regulation is just around the corner. This legislation will take effect in October 2024, and even though some details are still unknown, one thing is certain: we will be…

Lees verder >

Pentest

Pentest

Get the expertise of an experienced CISO and CTO, without a permanent hire. OpenSight helps your organization achieve lasting compliance with ISO 27001, NIS2 and DORA.

Lees verder >

Phishing

Phishing Simulation

Get the expertise of an experienced CISO and CTO, without a permanent hire. OpenSight helps your organization achieve lasting compliance with ISO 27001, NIS2 and DORA.

Lees verder >

Protection & Recovery For Your Identity

Today’s attacks no longer rely on malware alone. More and more often, your actual identity is used to carry out an attack. To quickly detect, remove, and recover from these attacks, OpenSight…

Lees verder >

Security Awareness

Security awareness

Get the expertise of an experienced CISO and CTO, without a permanent hire. OpenSight helps your organization achieve lasting compliance with ISO 27001, NIS2 and DORA.

Lees verder >

Data Soevereiniteit

Sovereign data storage

Get the expertise of an experienced CISO and CTO, without a permanent hire. OpenSight helps your organization achieve lasting compliance with ISO 27001, NIS2 and DORA.

Lees verder >

Zero Trust

Zero Trust

Get the expertise of an experienced CISO and CTO, without a permanent hire. OpenSight helps your organization achieve lasting compliance with ISO 27001, NIS2 and DORA.

Lees verder >

Zero Trust

Zero Trust is a major development in the world of Cyber Security. However, Zero Trust is not a solution; it is a security model based on the principle of ‘’never trust, always…

Lees verder >

Zero Trust for Cyber Asset Attack Surface Management

CAASM (Cyber Asset Attack Surface Management) enables IT managers to gain insight into coverage and hygiene levels across their entire IT environment.

Lees verder >

Zero Trust for Users

OpenSight offers a comprehensive solution to protect your organization against cyberthreats while enabling seamless and secure access to applications and data.

Lees verder >

Zero Trust for Workloads

OpenSight offers a Zero Trust solution designed to protect your organization’s workloads against cyber threats.

Lees verder >

1/1

Our focus is on delivering tailored cybersecurity solutions based on the organization’s risk profile. In our view, cybersecurity is not about technology alone; it is a combination of people, processes and technology, where technology should support the organization in achieving its objectives. Because we build long-term partnerships with our clients, we are not interested in short-term revenue, but in taking the journey together toward a risk profile that helps the client grow sustainably.

Deze website maakt gebruik van cookies

Er worden cookies gebruikt om functionaliteiten op de website mogelijk te maken, statistieken bij te houden, gebruikersvoorkeuren op te slaan en voor marketingdoeleinden.

Bekijk hier onze privacyverklaring
ALLES ACCEPTEREN
ALLES WEIGEREN
WIJZIGEN

Deze cookies zijn noodzakelijk om de website te laten functioneren en kunnen daarom niet worden uitgeschakeld.

Deze cookies verzamelen anonieme data waarmee we statistieken kunnen analyseren en de website kunnen verbeteren.

Deze cookies bewaren persoonlijke voorkeuren zoals taal of regio om het gedrag en design van de website op af te stemmen.

Deze cookies maken het mogelijk om (gepersonaliseerde) advertenties te tonen.

OPSLAAN