Availability is once again a top risk: hyper-volumetric DDoS attacks, application-layer attacks and hacktivism can disrupt digital services, even without any "data breach" taking place.
Typical signals
- Traffic spikes (L3/L4 or L7), increased error rates, latency
- Botnet traffic with high pps or Tbps peaks; multi-vector attacks
- Targeting of DNS, API gateways, login endpoints, checkout flows
Current-state check
- Use managed DDoS + CDN/WAF, rate limiting and autoscaling
- Exercise incident response on availability (runbooks, comms, failover)
- Measure RTO/RPO and test failover regularly
