ConnectWise: Business impact and costs
Expanded web report · Related PDF snapshot: 22 October 2026 · PDF page 15
Research reviewed 22 October 2026 · Evidence and editorial planning guidance are distinguished below.
The business process at risk
Cloud backup and administration integrations with application permissions over business email, files, directories and recovery processes.
A trusted backup integration can expose business information without interrupting ordinary user login. Disabling it may also reduce recovery coverage, so the business needs a temporary continuity decision while identity scope is investigated.
Build an estimate from your own operation
Estimate interruption, investigation, recovery and continuing control costs separately. Use a range and state the assumptions. Avoid adding overlapping losses twice: an order delayed and later fulfilled is different from an order permanently lost. The report does not assign a universal dollar loss or a probability of breach.
- Interruption: affected transactions or staff hours × your measured contribution or cost, adjusted for work recovered later.
- Response: internal hours, specialist support, clean capacity and supplier coordination actually required.
- Recovery: rebuilding, validation, transaction reconciliation and customer support during the transition.
- Continuing operation: ownership, maintenance, access review and recovery testing after normal service returns.
Decisions for the operating team
- Identify critical records and the temporary recovery method for each.
- Arrange controlled handling of work created during any backup coverage gap.
- Authorize investigation of application identity and business-data access.
A scenario to rehearse
Illustrative exercise, not an observed customer incident: Every user changes their password, but a malicious application credential still authorizes access to business files. The exercise requires the identity team to find and invalidate the separate application path.
Evidence before accepting the cost
A supplier-access decision with explicit recovery coverage and residual uncertainties.
Compare immediate continuity work with longer-term architecture changes. Migration can reduce specific maintenance responsibilities, but it cannot replace investigation of an active compromise. Evaluate the controls and retained responsibilities of the proposed operating model, including recovery and exit.
Decision checkpoint
Can the business recover if its backup identity is part of the incident?