When “State-of-the-Art” Backups Fail | Cybersecurity Lessons with Dom Vogel
Most organizations assume their backups, disaster recovery plans, and security controls will work during a cyberattack.
But what happens when those systems have never actually been tested?
In this episode of Code to Cloud — Firewall Fridays, Host Kevin Evans sits down with cybersecurity expert Dom Vogel breaks down a real-world incident where a mid-sized construction company lost nearly $500,000 after discovering their “state-of-the-art” backup system failed when it mattered most.
This wasn’t caused by advanced ransomware or elite hackers.
It was caused by a common organizational mistake: trusting technology without validating it.
If you lead IT, manage risk, oversee finance, or run a business dependent on digital systems, this conversation explores the practical realities of cybersecurity, backup testing, and organizational resilience.
What You’ll Learn
Why modern backup systems still fail during ransomware incidents
The hidden risk behind untested disaster recovery plans
How cybersecurity myths create operational blind spots
Why continuous validation is replacing traditional security audits
How everyday devices and jailbroken streaming boxes become enterprise attack vectors
The shift from top-down cyber threats to bottom-up vulnerabilities
Leadership, governance, and accountability in cybersecurity decision-making
Practical ways organizations can strengthen cyber resilience today
Who Should Listen
This episode is designed for:
Business owners and executives
CFOs and risk leaders
IT directors and managed service providers
Cybersecurity professionals and CISOs
Organizations operating cloud, on-premise, or hybrid environments
Anyone responsible for business continuity, data protection, or cyber risk management will recognize challenges discussed in this conversation.
Why This Episode Matters
Cyber incidents rarely happen because organizations lack technology.
They happen because systems are assumed to work instead of being proven to work.
Dom Vogel explains why cybersecurity must evolve from compliance checklists and tool purchases toward continuous testing, systemic thinking, and organizational accountability.
Cyber resilience is not built during an incident — it is validated long before one occurs.
Cybersecurity Guide
Practical cybersecurity guidance for Canadian organizations:
Code To Cloud Guide
Subscribe to Code to Cloud
Code to Cloud explores real cybersecurity incidents, leadership decisions, risk management strategies, and lessons learned from the front lines of IT and security.
New episodes released regularly.
Chapters
00:00 Introduction — Code to Cloud & Firewall Fridays
01:20 The Myth of “State-of-the-Art” Backups
02:00 The $500K Backup Failure Case Study
05:15 Why Testing and Validation Matter
09:30 Cloud vs On-Prem Backup Reality
12:45 Leadership, Accountability & Cyber Risk
16:40 Fixing Organizational Security Culture
20:00 The Jailbroken “Super Box” Story
24:30 Hidden Hardware Security Risks
28:30 Key Cybersecurity Lessons & Wrap-Up
New Zealand