Skip to content

Punti di forza

  • Streamlined process: Simplifies recovery through enhanced threat detection and validation.
  • Integrated experience: One simple process from threat identification to production recovery.
  • Readiness: Configure, plan, and test cyber recovery plans to uncover gaps.
  • Rapid detection and validation: Quickly identify clean points and validate recovery.
  • Confident recovery: Helps organizations confidently recover clean data, apps, and infrastructure.

In today’s landscape of relentless cyber threats, organizations are grappling with an unprecedented challenge: maintaining business continuity in the face of potential data loss and system compromise. The recent surge in sophisticated ransomware attacks has underscored the critical need for strategie cyber resilience solideche vadano oltre i tradizionali metodi di backup e ripristino.Commvault Cloud Cleanroom Recoveryintroduce un approccio innovativo a questa sfida. Creando un ambiente on-demand, sicuro e isolato, le aziende possono testare i loro piani di ripristino, condurre indagini forensi approfondite ed eseguire ripristini di produzione senza rischiare di interrompere ulteriormente le loro attività.

Prontozza/Test di Cyber Recovery + Forensics = Ripristino ottimale

Ransomware threats targeting backup systems have become increasingly common, highlighting the vulnerabilities in conventional recovery processes. It’s no longer sufficient to simply have a recovery plan in place; organizations must rigorously test and validate their strategies to prepare to withstand real-world cyberattacks.

Cleanroom Recovery can help organizations seeking to maintain uninterrupted operations amid disruption. Testare i propri piani di ripristino informaticoè una parte fondamentale per raggiungere una vera resilienza informatica. Facilitando un ripristino rapido e affidabile, riducendo al minimo i tempi di inattività e ottimizzando i processi, i test svolgono un ruolo vitale nel rafforzare la continuità operativa.

Mentre le organizzazioni continuano a dare priorità a solidi piani di ripristino informatico, l’importanza di test rigorosi non può essere sopravvalutata. Con protocolli di test efficaci, le organizzazioni possono identificare le vulnerabilità e verificare che le loro strategie di ripristino siano sempre in linea con l’evoluzione delle minacce informatiche. Una volta che un’organizzazione ha impostato una scansione regolare delle minacce informatiche su tutti i backup e ha testato i suoi piani, può condurre un’analisi forense per identificare la causa principale di un attacco e indagare su tutti i sistemi interessati. Questi due casi d’uso aumentano la fiducia nell’esecuzione di un ripristino ottimale.

What’s New in Cleanroom Recovery?

Building on its foundation, the latest Cleanroom Recovery innovations are introducing significant enhancements that further strengthen cyber recovery capabilities. These advancements deliver new capabilities that help organizations protect their critical infrastructure and data.

Recent and upcoming developments have bolstered Cleanroom Recovery’s capabilities in orchestration, security, and scalability, including early access to:

  • Cleanroom creation automation: Automate cleanroom deployment, cross hypervisor recovery and threat scanning inside the cleanroom to remove manual intervention​. (Generally Available)
  • Runbook experience: Ability to create multiple runbooks for critical assets for different use cases. Runbooks provide step-by-step execution playbooks with optional manual steps.​ (Early Access)
  • Expanded workload support: You can recover Active Directory forest along with VMs and files into a cleanroom for end-to-end application validation. ​(Early Access)
  • On-premises deployment capabilities: You now can use Cleanroom Recovery to recover critical application into an isolated recovery environment in an on-premises data center using air-gapped Hyperscale X (Early Access)

These advancements illustrate a continued focus on expanding the features, capabilities, and scale of Cleanroom Recovery. This is the next phase in Cleanroom Recovery’s evolution. The solution helps provide customers with enhanced efficiency, scalability, and adaptability, with the flexibility to deploy isolated cleanroom in cloud and on-premises.

Cleanroom Recovery helps enable customers to effortlessly spin up automated cleanrooms with streamlined runbooks and features threat scanning capabilities for comprehensive threat detection and recovery.

With this new evolution, organizations will be enabled to quickly and safely test their cyber recovery plans, validate applications, and execute a confident cyber recovery. Commvault is delivering one integrated experience from identifying threats to production recovery.

Domande frequenti

Q: What is Cleanroom Recovery, and why is it important?
A: Cleanroom Recovery is a secure, isolated environment that enables organizations to test recovery plans and conduct forensic analysis without risking production systems. This helps organizations maintain continuous business operations and improve cyber resilience against modern ransomware threats.

Q: How does Cleanroom Recovery enhance cyber recovery readiness?
A: By automating cleanroom creation to conduct recovery testing and enabling forensic investigation, it helps organizations validate their recovery strategies, uncover vulnerabilities, and execute faster, more confident recoveries after cyber incidents.

Q: What are the main new features in the Cleanroom Recovery release?
A: Key innovations include automated cleanroom deployment, new runbook capabilities for multiple recovery scenarios, support for Active Directory recovery, and the ability to deploy in on-premises data centers with air-gapped Hyperscale X.

Q: How does Cleanroom Recovery improve security during recovery operations?
A: It isolates the recovery environment, scans for threats pre-/post-recovery, provides controlled orchestration, and helps reduce the risk of reinfection or unauthorized access during recovery.

Q: Can Cleanroom Recovery be deployed both on-premises and in the cloud?
A: Yes, organizations now can deploy Cleanroom Recovery in both cloud and on-premises environments, providing flexibility for hybrid infrastructures and diverse security requirements.

Q: Who benefits most from Cleanroom Recovery?
A: Enterprises seeking to strengthen their cyber resilience, particularly those facing ransomware risks or complex recovery needs, gain value from its automation, scalability, and integrated testing capabilities.Toussaint Brock is a Product Marketing Manager at Commvault.

Blog correlati

More related posts

Thumbnail_Blog-Architect-for-tomorrow-2026

Architect for Tomorrow: Unified Data Protection as the Foundation for Resilience

Read more
Thumbnail_Blog-Dangerous-Silos-IDC-Resops-2026 (1)

The Importance of Recovery Point Objective (RPO) in Your Business Continuity Plan

Read more
Thumbnail_Blog-IDC-Resops-2026

Business Continuity Planning for the Cloud-Native Era

Read more

Punti di forza

  • The platform Commvault Cloud Unity release is an AI-enabled platform that unifies data security, cyber recovery, and identity resilience across all environments – from cloud to on-premises.
  • Aiuta a eliminare i silos tra gli strumenti di sicurezza, identità e recupero, consentendo una protezione più rapida, intelligente e affidabile.
  • Commvault’s Synthetic Recovery™ uses AI to surgically remove compromised data and restore clean data quickly.
  • Integrated Identity Resilience rileva e ripristina le modifiche dannose ai sistemi critici come Active Directory.
  • Grazie all’intelligence integrata, Commvault Cloud apprende continuamente dalle minacce, rendendo la resilienza aziendale proattiva e adattiva.

Today, we’re entusiasti di annunciare the platform Commvault Cloud Unity release, our next-generation, AI-enabled platform designed to unify data security, cyber recovery, and identity resilience across every environment your business runs on – cloud, SaaS, on-premises, and hybrid.

For years, IT and security teams have been fighting an uphill battle. Data is growing faster than ever, AI is generating it at lightning speed, and bad actors are taking full advantage. Meanwhile, enterprises are forced to stitch together countless security tools and recovery solutions that don’t talk to each other. The result? More silos, more risk, and slower recoveries when time matters most.

The platform Commvault Cloud Unity release helps change that.

This isn’t just another platform release. It’s a redefinition of what resilience means in the AI era.

Perché abbiamo realizzato la release della Platform Commvault Cloud Unity

Ogni azienda oggi deve affrontare una tempesta perfetta di sfide:

  • Explosive data growth fueled by AI and distributed work.
  • Disjointed tools for data protection, security, and identity management.
  • Complex environments that span cloud, SaaS, edge, and on-prem.

These are problems we’ve seen firsthand – and we knew the answer wasn’t another tool. It was a unified platform that could simplify and strengthen resilience at its core.

So, we created the platform Commvault Cloud Unity release: the first truly unified resilience platform that brings together data security, cyber recovery, and identity protection – all under one intelligent control plane.

“Today enterprises are facing the perfect storm: non-stop cyber threats, exacerbated by AI; attacks on identity systems that paralyze organizations; and recovery challenges that impact revenues and reputations,” said Pranay Ahlawat, Chief Technology and AI Officer at Commvault. “Commvault brought together the best engineering minds in the business and is debuting a transformative platform release that not only unifies resilience across disciplines and environments but helps drive business outcomes that can redefine new benchmarks in the industry.”

What Makes Commvault Cloud … Unified

Let’s break down what makes this next generation of Commvault Cloud so different – and so powerful.

  1. Data Security That Sees Everything

Commvault Cloud helps you stay a step ahead of risk with AI-enabled discovery, classification, and protection across all your data. It learns what’s sensitive, recommends protection policies, and enforces them automatically.

With our recent integration of Satori Cyber, Commvault Cloud now brings data and AI access governance into the fold – adding even more visibility and control over how your data is used, shared, and protected.

  1. Cyber Recovery That’s Redefined

Traditional recovery methods can take hours or days – time your business can’t afford during an attack. Commvault introduces Synthetic Recovery, an AI-enabled approach that surgically removes compromised data and helps recover everything else cleanly.

This means you’re not just restoring data – you’re restoring trust. Fast.

  1. Identity Resilience Built In

When identity systems like Active Directory go down, entire organizations can grind to a halt. Commvault Cloud’s Identity Resilience capabilities detect hidden threats in those systems and can rapidly roll back malicious changes, restoring access and productivity quickly.

Commvault makes identity protection part of your overall resilience strategy – not an afterthought.

  1. Unified Governance for a Unified World

Security, identity, and recovery teams have long operated in silos – each with their own tools, dashboards, and processes. The platform Commvault Cloud Unity release brings them together.

Now, you can monitor, enforce, and respond to threats across your entire ecosystem from one place. That means faster response times, cleaner recoveries, and a single version of the truth for all your resilience data.

  1. Intelligence That Gets Smarter Every Day

By combining insights from data security, identity behavior, and recovery operations, the platform Commvault Cloud Unity release delivers AI-enabled intelligence that helps you not just react to threats – but predict and prevent them.

This unified intelligence layer drives automation across the platform, helping enterprises achieve the cleanest, fastest, and most complete recoveries possible.

Built for Every Environment – and Every Team

One of Commvault Cloud’s biggest strengths is its flexibility. Whether your business runs entirely in the cloud, stays on-prem, or operates in a hybrid model, Commvault Cloud fits right in.

From protecting Microsoft 365 and Google Workspace to securing DevOps environments like GitHub, GitLab, and Azure DevOps, the platform Commvault Cloud Unity release brings resilience to the tools your teams already rely on.

We’re even extending protection to CRM systems like Salesforce and Dynamics 365 – and expanding across platforms like Atlassian, Jira, Slack, and Power Apps.

This is what we mean when we say Commvault Cloud helps deliver one of the most comprehensive SaaS protection portfolios in the industry – unified and built to grow with you.

Progettato per l’era dell’intelligenza artificiale

AI isn’t just part of Commvault Cloud – it’s at the heart of it.

From intelligent threat detection and automated policy enforcement to recovery workflows that optimize themselves, Commvault Cloud uses AI to make resilience proactive, adaptive, and continuous.

That’s what we call AI-enabled unified resilience – the ability to not just bounce back from disruption, but to get smarter every time it happens.

Il futuro è unificato

The platform Commvault Cloud Unity release isn’t just about solving today’s problems – it’s about preparing for tomorrow’s.

By unifying data security, cyber recovery, and identity resilience under one intelligent platform, we’re giving enterprises a new way to protect what matters most – their data, their operations, and their future.

In short: Commvault Cloud simplifies resilience. And more importantly, it redefines it.

FAQs

Q: What is the platform Commvault Cloud Unity release?
A: The platform Commvault Cloud Unity release is a next-generation resilience platform that unifies data security, cyber recovery, and identity protection into a single AI-enabled solution. It allows organizations to protect, recover, and manage data across cloud, SaaS, hybrid, and on-prem environments.

Q: How does Synthetic Recovery™ work?
A: Synthetic Recovery™ uses AI to analyze affected systems, isolate compromised data, and restore only verified clean data. This shortens recovery time and helps organizations rebuild trust after a cyberattack faster than traditional methods.

Q: What makes the platform Commvault Cloud Unity release different from other resilience or backup platforms?
A: Unlike siloed tools that manage data protection, security, and identity separately, the platform Commvault Cloud Unity release combines them into one intelligent control plane. This unified governance enables real-time visibility, faster response, and stronger compliance across the enterprise.

Q: How does Commvault Cloud enhance identity resilience?
A: Commvault Cloud Identity Resilience actively monitors identity systems like Active Directory for malicious changes, detects potential threats, and can rapidly roll back compromised accounts or configurations – letting employees regain safe access quickly.

Q: Is the platform Commvault Cloud Unity release compatible with existing business tools and cloud platforms?
A: Yes. Commvault Cloud integrates with platforms like Microsoft 365, Google Workspace, Salesforce, GitHub, Jira, and more, providing broad SaaS and hybrid protection that grows with your organization’s needs.

Kristin Flandreau is Senior Director, Product & Customer Marketing, at Commvault.

More related posts

Thumbnail_Blog-SHIFT-Announcement-Recover-Clean-2025-Linkedin

Recover Clean, Recover Fast

Read more
Thumbnail_Blog-SHIFT-Announcement-Next-Evolution-2025-Linkedin

The Next Evolution in Cloud Data Protection

Read more
Readiverse_ShareImage_1200x630

The Conversations That Inspired the Readiverse

Read more

Punti di forza

  • Synthetic Recovery™ automates finding a clean recovery point and assembling only the most recent uncorrupted versions, enabling clean, fast restores across your backup estate.
  • Escludendo i file crittografati o dannosi prima dell’inizio del ripristino, aiuta a prevenire la reinfezione e riduce al minimo i rollback non necessari.
  • Il rilevamento delle minacce basato sull’intelligenza artificiale e su più motori (analisi comportamentale, firme, apprendimento automatico, euristica, YARA/Hash e segnali dei partner) consente di identificare con precisione i dati validi.
  • L’approccio trasforma il recupero da triage reattivo a una capacità di resilienza strategica e automatizzata all’interno della platform Commvault Cloud Unity.

When cyberattacks strike, recovery confidence is everything. The ability to restore operations quickly ­– and know that the data you’re bringing back is clean – separates the resilient from the vulnerable.
With exclusive Synthetic Recovery™, Commvault ha annunciato un’innovazione rivoluzionaria as part of the Commvault Cloud Unity platform release. Enabled by AI and Commvault’s industry-leading multi-engine threat detection capability, Threat ScanScanSynthetic Recovery aiuta le organizzazioni a raggiungere uno degli obiettivi più sfuggenti della cyber resilience: un ripristino pulito, rapido e completo.

Il divario di fiducia nel Cyber Recovery

Even the best-protected environments can harbor hidden threats. Ransomware and other malware can remain dormant for days or weeks before activating, compromising systems and even backups.
When that happens, traditional recovery approaches – manual scans, isolated recovery environments, and trial-and-error restore – can waste valuable time, drive unnecessary data rollback, and risk reintroducing malware into production systems.
Enter Synthetic Recovery, designed to close this confidence gap in cyber recovery.

Dati puliti e veloci: Il potere del recupero sintetico

Synthetic Recovery automates the process of Cleanpoint™ identification, assembly, and restore of only the most recent uncorrupted file versions across entire backup data estates.
By drawing on AI-enabled  insights across multiple backups, Commvault can assemble a curated recovery point that can help:

  • Speed up restoration by automating clean data assembly, reducing downtime from hours to minutes.
  • Prevent reinfection by excluding encrypted or malicious files before recovery begins.
  • Minimize rollback by keeping the most current, validated file versions of good data.
  • Simplify recovery across workloads, clouds, and storage environments.

The result? Faster recoveries, cleaner outcomes, and unified operations that strengthen enterprise resilience from the inside out.

Precisione dell’intelligenza artificiale al lavoro

Synthetic Recovery is powered by Commvault’s AI-enabled  multi-engine threat detection and response – a system that combines behavioral analytics, static signatures, machine learning, heuristic detection, YARA-rule and Hash scanning, and security partner signals to spot both known and zero-day threats with exceptional accuracy.
This intelligent automation helps Commvault customers build assurance that every recovery is validated, clean, and secure – not only restoring your data, but also your confidence in it.

Resilienza unificata per le operazioni moderne

For today’s IT and security teams, Synthetic Recovery represents more than a feature – it’s a mindset shift. It transforms recovery from a reactive process into a strategic, automated resilience capability.
By bringing together la protezionecloud, il rilevamento avanzato edella resilienza delle identità in one platform, Commvault empowers enterprises to move faster, recover smarter, and operate with certainty – even in the face of the unexpected.

Domande frequenti

Q: What is Synthetic Recovery?

A: Synthetic Recovery™ is a new Commvault capability within the Threat Scan offering that automates clean and verifiable data recovery after a cyberattack. It identifies and assembles the most recent uncorrupted file versions from entire backup estates across multiple virtual machines and files, creating a single, curated recovery point. This helps organizations restore operations faster, cleaner, and with confidence, while minimizing rollback and reinfection risk.
Q: Why is Synthetic Recovery important now?

A: Modern ransomware and malware threats are increasingly stealthy, often lying dormant for days or weeks before activation. During that time, malicious data can silently enter backup sets. When that happens, traditional recovery methods risk restoring infected data. Synthetic Recovery helps solve this by combining AI-enabled threat detection, Cleanpoint™ identification, and automated clean data assembly to enable that only verified, healthy data is brought back online.
Q: How does Synthetic Recovery differ from traditional recovery methods?

A: Traditional clean recovery workflows rely on manual steps such as creating isolated recovery environments, manually restoring data for external scanning, and guessing at the “last known good” recovery point.
Synthetic Recovery removes that guesswork. Using Commvault’s indexed backup data and AI-enabled threat detection, it automatically identifies and replaces compromised files, generating a dataset ready for immediate recovery – no manual validation required.
Q: What role does AI play in Synthetic Recovery?

A: Synthetic Recovery leverages Commvault’s AI-enabled multi-engine threat detection and response framework. This includes:

  • Analisi comportamentale per rilevare attività insolite sui file.
  • Modelli di apprendimento automatico che riconoscono i modelli di crittografia e ransomware.
  • Scansione statica e basata sulle firme per le minacce note.

For a complete list of Commvault Threat Scan detection techniques, request a demo.
Q: How does Synthetic Recovery help reduce reinfection risk?

A: Because Synthetic Recovery excludes files identified as malicious or encrypted, it helps validate that compromised data never re-enters production environments. This can break the reinfection cycle, giving teams confidence that every restored file has been validated as safe – based on AI analysis and Commvault’s multi-engine threat intelligence.
Pauline List is a Product Marketing Specialist at Commvault.

More related posts

Thumbnail_Blog-SHIFT-Announcement-Recover-Clean-2025-Linkedin

Recover Clean, Recover Fast

Read more
Thumbnail_Blog-SHIFT-Announcement-Commvault-Cloud-Unity-2025-Linkedin

A New Era of Enterprise Resilience

Read more
Thumbnail_Blog-SHIFT-Announcement-Next-Evolution-2025-Linkedin

The Next Evolution in Cloud Data Protection

Read more
Thumbnail_Blog_Modern-Playbook-2025

Your Modern Playbook for Rapid Response and Clean Recovery

Read more

Punti di forza

  • Commvault sta introducendo un modello Dedicated Tenant che offre un ambiente SaaS isolato per le organizzazioni con requisiti rigorosi di sicurezza, sovranità e controllo.
  • La governance unificata abilitata dall’intelligenza artificiale scopre i carichi di lavoro, classifica i dati e consiglia i criteri di protezione per semplificare la conformità e la mitigazione dei rischi nei complessi ibridi e cloud .
  • La platform aiuta a fornire visibilità immediata sui carichi di lavoro protetti e non protetti e sui relativi costi, contribuendo a ridurre l’esposizione al rischio e a ottimizzare il TCO.
  • Il controllo regionale della distribuzione e l’infrastruttura separata dei tenant supportano i mandati legati a GDPR, HIPAA e FedRAMP.
  • Insieme, l’isolamento dedicato e la supervisione basata sull’intelligenza artificiale contribuiscono a garantire una protezione resiliente e lungimirante per le risorse mission-critical in settori altamente regolamentati.

Highly regulated industries like healthcare, finance, and government face mounting cyber resilience challenges driven by evolving regulations such as GDPR, HIPAA, and FedRAMP, alongside increasingly sophisticated ransomware attacks.

Operating across complex hybrid environments – where sensitive data spans on-premises systems, public clouds, and SaaS platforms – further amplifies these risks. The need to help maintain consistent data protection policies, enforce sovereignty and compliance controls, and manage visibility across fragmented infrastructures makes resilience especially difficult.

Commvault has annunciatodue importanti innovazioni nell’ambito dellarelease platform Commvault Cloud Unity – Dedicated Tenantand AI-enabled unified governance. This release marks a major step in the evolution of cloud-native data protection, particularly for mission-critical resources in highly regulated industries.

This update brings AI-enabled classification and dedicated, isolated environments to the forefront, empowering modern enterprises to protect mission-critical data and maintain compliance across hybrid and multi-cloud operations.

Dedicated Tenant: Fully isolated SaaS deployment model designed for large enterprises and highly regulated industries that require stringent compliance, sovereignty, and control. It delivers the sameesperienza Commvault Cloud in un ambiente dedicato, combinando l’agilità SaaS con l’isolamento di livello aziendale e la garanzia delle normative.Commvault Cloud experience in a dedicated environment, combining SaaS agility with enterprise-grade isolation and regulatory assurance.

AI-enabled unified governance: Intelligent visibility and automation across hybrid and multi-cloud environments, simplifying compliance, policy management, and risk mitigation. By leveraging AI to unify oversight across data estates, organizations can more easily identify gaps, enforce consistent protection policies, and strengthen overall cyber resilience.

The new platform introduces an AI-enabled experience that automatically discovers workloads across cloud estates and recommends protection policies based on workload classification. This approach is particularly valuable for mission-critical resources and helps enable organizations to:

  • Applicare automaticamente i criteri di protezione appropriati in base alla classificazione dei carichi di lavoro.
  • Ottenete una visibilità immediata sui carichi di lavoro protetti e non protetti, insieme ai costi associati, contribuendo a ridurre l’esposizione al rischio e a ottimizzare il costo totale di proprietà.
  • Gain instant visibility into protected and unprotected workloads, along with their associated costs – helping reduce risk exposure and optimize total cost of ownership.

Maggiore protezione e privacy con l’inquilino dedicato

Per le grandi aziende che operano in settori altamente regolamentati, Commvault Cloud ha rilasciato un’offerta Dedicated Tenant progettata per le organizzazioni con requisiti di sicurezza, conformità o sovranità molto severi che richiedono un isolamento rigoroso dell’infrastruttura di calcolo, rete e storage dagli altri clienti. Offre le stesse funzionalità e UI/UX della

platform Commvault Cloudstandard, con l’ulteriore vantaggio dell’isolamento dagli altri tenant. Questa opzione di distribuzione SaaS dedicata fornisce:Ambienti isolati:

  • Isolated environments: Customers are provisioned with dedicated SaaS environments that help keep compute, storage, and management resources completely isolated from unrelated tenants.
  • Regional control: The ability to select geographic regions for deployment helps meet sovereignty and compliance mandates.
  • Regulatory assurance: By separating tenant infrastructure, a dedicated tenant helps simplify audits and helps customers demonstrate compliance with frameworks such as HIPAA, FedRAMP, and GDPR.

L’ultima release platform Commvault Cloud, con Dedicated Tenant e classificazione e governance abilitate dall’AI, segna un progresso fondamentale nella protezione dei dati per i settori altamente regolamentati. Unendo la classificazione abilitata dall’intelligenza artificiale, l’intelligenza della conformità e gli ambienti SaaS dedicati e isolati, Commvault offre una soluzione completa per aiutare a proteggere le risorse mission-critical in ecosistemi complessi e cloud .

Con la crescente distribuzione degli ambienti di dati e l’intensificarsi delle richieste di conformità, queste innovazioni aiutano le organizzazioni a raggiungere la continuità operativa, a mantenere la fiducia nelle normative e a creare strutture di protezione dei dati resilienti e orientate al futuro, che si evolvono al ritmo del business moderno.

Commvault Cloud’s latest platform release, featuring Dedicated Tenant and AI-enabled classification and governance, marks a pivotal advancement in data protection for highly regulated industries. By uniting AI-enabled classification, compliance intelligence, and dedicated, isolated SaaS environments, Commvault delivers a comprehensive solution for helping protect mission-critical resources across complex, multi-cloud ecosystems.

As data environments grow more distributed and compliance demands intensify, these innovations help empower organizations to achieve operational continuity, maintain regulatory confidence, and build resilient, forward-facing data protection frameworks that evolve with the pace of modern business.

Domande frequenti

Q: What is Commvault Cloud Dedicated Tenant, and who is it for?
A: Dedicated Tenant is a fully isolated SaaS deployment of Commvault Cloud that separates compute, storage, network, and management resources from other customers. It’s designed for large enterprises and regulated sectors that need tight control, sovereignty, and audit-friendly separation without giving up SaaS agility.

Q: How does the AI-enabled unified governance help day to day?
A: It automatically discovers workloads across clouds, classifies sensitive data, and recommends appropriate protection policies so teams can act faster and more consistently. This unified oversight helps reduce manual policy drift, highlight coverage gaps, and prioritize remediation to strengthen cyber resilience.

Q: What compliance outcomes does this release support (e.g., GDPR, HIPAA, FedRAMP)?
A: By isolating tenant resources and providing regional control, Dedicated Tenant helps make it easier to demonstrate adherence to sovereignty and regulatory requirements. Unified governance then maps classification to policies, helping organizations document posture and respond to audits with clearer evidence.

Q: How does this reduce risk and total cost of ownership?
A: Continuous visibility into protected vs. unprotected workloads and their associated costs helps enable targeted remediation and smarter allocation of spend. Automated policy recommendations help reduce administrative overhead and the likelihood of costly protection gaps.

Q: What does regional control look like in practice?
A: Organizations can choose deployment regions for their dedicated environment to align with data residency and sovereignty mandates. This geographic placement, combined with isolated infrastructure, helps support regulatory confidence and operational control.

Q: Will this work across my hybrid and multi-cloud environment without adding complexity?
A: Yes ­– the AI-enabled experience is built to unify visibility and governance across on-prem, public cloud, and SaaS workloads. It helps centralize classification and policy management so teams can operate with a single, consistent model across distributed estates.

Cailin Pitcher is a Senior Portfolio Marketing Manager at Commvault.

More related posts

Thumbnail_Blog-SHIFT-Announcement-Recover-Clean-2025-Linkedin

Recover Clean, Recover Fast

Read more
Thumbnail_Blog-SHIFT-Announcement-Commvault-Cloud-Unity-2025-Linkedin

A New Era of Enterprise Resilience

Read more
Readiverse_ShareImage_1200x630

The Conversations That Inspired the Readiverse

Read more

Commvault Unveils a New Era in Enterprise Resilience with the Commvault Cloud Unity Platform Release

Commvault, a leader in unified resilience at enterprise scale, announced the Commvault Cloud Unity platform release, one of the most substantive platform releases in Commvault’s history. This next-generation, AI-enabled version of Commvault Cloud now unifies data security, cyber recovery, and identity resilience across cloud, SaaS, on-premises, and hybrid environments.

Commvault Transforms How Enterprises Make Clean, Complete, and Automated Cyber RecoveriesCommvault ha annunciato innovazioni rivoluzionarie che ridefiniscono le modalità di ripristino pulito, completo e automatizzato delle organizzazioni. Gli attacchi ransomware possono tentare di compromettere l’archiviazione dei backup, lasciando le organizzazioni vulnerabili nel tentativo di ottenere ripristini dei dati puliti, sicuri e completi. Commvault sta affrontando questa sfida da cima a fondo.Commvault Expands End-to-End Identity Resilience: Detect, Log, and Reverse Hard-to-Detect Threats in Active Directory

Commvault announced an expansion of its end-to-end Identity Resilience portfolio – enabling customers to find hard-to-detect threats in Active Directory (AD), automatically log and audit malicious changes, and then rapidly roll back changes to a trusted, clean state. The company also announced advancements to its Active Directory forest recovery offering that helps teams test recovery plans in good times, so they are ready for the bad times.

Commvault Cloud Unity Platform Release Brings New Levels of Simplicity, Scalability, Cost Optimization, and Resilience for Cloud-first Enterprises

Commvault announced the company is setting a new benchmark for cloud-native data protection. Purpose-built for cloud-first and hybrid enterprises, the new release introduces a re-engineered experience designed for simplicity, speed, scale, and cost optimization, as Commvault centralizes resilience operations across clouds, regions, and accounts. With AI-enabled discovery, classification, and protection policy recommendations, this platform is designed to scale resilience in minutes across multi-cloud environments – at the best TCO.

More related posts

Thumbnail_Blog-Architect-for-tomorrow-2026

Architect for Tomorrow: Unified Data Protection as the Foundation for Resilience

Read more
Thumbnail_Blog-Dangerous-Silos-IDC-Resops-2026 (1)

The Importance of Recovery Point Objective (RPO) in Your Business Continuity Plan

Read more
Thumbnail_Blog-IDC-Resops-2026

Business Continuity Planning for the Cloud-Native Era

Read more

November is a special month that honors the service and sacrifice of our men and women in the military.

We not only recognize Veterans Day, a day to celebrate those who have served and continue to serve in the United States, but we also recognize Remembrance Day across many of the Commonwealth countries – including United Kingdom, Australia, New Zealand, and Canada – to honor the ultimate sacrifice of those who gave their lives in service to their country. Though the tone differs for each of these days, one celebratory and one reflective, both honor courage, sacrifice, and commitment to something greater than oneself.

How Service and Sacrifice Unite Us Worldwide

These days certainly hold the value of one truth that is undisputed – that service and sacrifice are universal. These are values that transcend borders and unite allies and communities worldwide. As a U.S. Navy veteran currently living in Australia, I am filled with pride to see how this universal spirit of service carries across borders and cultures globally.

Here in Australia, as a U.S. veteran and as a key ally, we are invited to celebrate and be recognized with our brothers and sisters on Remembrance Day. Ceremonies across the nation reflect on the importance of our global brothers and sisters in arms and the ongoing commitment and sacrifices we continue to share on the battlefield abroad and here at home.

The Power of Operating as One Unified Team

The global culture we have at Commvault means that we are all one team, working together on the common goal of defeating threats and protecting our businesses and communities. Our resilience, teamwork, and shared belief that we always have each other’s back reminds me of the values and principles of being in the military and on the battlefield.

Integrating Key Values From Service Into the Workplace

As I reflect on November, I often think about what service means to me. Service is a lifelong commitment to giving with purpose, acting with integrity, and standing up for those who can’t stand up for themselves. It’s about doing what is right, not for recognition, but because it’s the right thing to do. The military has had a profound impact on my leadership style. It taught me to stay calm under pressure, lead from the front, and ensure no one is left behind. These principles have shaped my approach to leadership at Commvault.

Today, my team in APAC knows my three key principles of success: focus, cadence, and discipline. We focus on our goals, establish a consistent rhythm for our business, and maintain the discipline to adapt and persist until we succeed. Other military-inspired leadership principles I practice at Commvault include:

  • Guidare con empatia e chiarezza.
  • Rimanere concentrati sulla missione durante il cambiamento.
  • Costruire team basati su fiducia, inclusione e obiettivi condivisi.

Like the core values I learned in service, Commvault thrives on resilience, purpose, and the drive to protect what matters. 

Creating a Culture of Community and Belonging

It gives me such pleasure to have served my country and our allies, and I am honored to work for a company that recognizes and supports our veterans. Not only does Commvault value resilience and teamwork, we have wonderful volunteer and community initiatives supporting organizations like Warrior Canine Connection and a dedicated Employee Resource Group – VALOR – focused on bringing awareness to the value our veterans bring to the private and public sector. To learn more about our culture of care, clicca qui. In questo mese di novembre, vi invito a riflettere e a celebrare il sacrificio che tutti i nostri uomini e donne in uniforme compiono quotidianamente. E se oggi vi capita di incrociare un militare attivo o un veterano, assicuratevi di ringraziarlo per il suo servizio. MartinMartin Creighan is Vice President, APAC, at Commvault.

More related posts

Thumbnail_Blog-Architect-for-tomorrow-2026

Architect for Tomorrow: Unified Data Protection as the Foundation for Resilience

Read more
Thumbnail_Blog-Dangerous-Silos-IDC-Resops-2026 (1)

The Importance of Recovery Point Objective (RPO) in Your Business Continuity Plan

Read more
Thumbnail_Blog-IDC-Resops-2026

Business Continuity Planning for the Cloud-Native Era

Read more

In every customer meeting over the past year, there’s been a moment where the conversation shifts from technology to business strategy to justifying an investment in cyber resilience. No longer are you – as CIOs and technologists – yearning for that seat at the table. It’s yours, and you need to be ready and empowered to lead the conversation.

We’ve Heard You

In thousands of conversations that I’ve had with our customers, I’ve heard three consistent themes:

  1. “Help us connect resilience to business outcomes.”

We know you don’t struggle with understanding backup technology. What we hear are your struggles with articulating why resilience matters to executives who think about revenue, market share, and competitive advantage, not RTO and RPO.

You need ways to translate technical capabilities into business value: benchmark data that shows where you stand compared to peers; quick, digestible perspectives from executives who’ve made these cases successfully.

  1. “Give us insight into what’s actually happening in the threat landscape.”

Security threats are daily headlines. AI-enabled attacks are evolving faster than ever. But which threats actually matter to your business? Which vulnerabilities should you address first? What are your peers seeing in real incidents?

You want curated intelligence, not more noise. You want analysis from people who’ve been CISOs and CIOs, who understand the difference between a theoretical threat and a practical business risk. You need to understand both how AI is being weaponized by attackers and how to secure your own AI implementations.

  1. “Show us what good looks like.”

When I’ve asked you, “Are you ready for the next disruption?”, many of you have honestly answered, “I don’t know.” Not because you lack capabilities, but because you lack clear benchmarks.

You want to understand: What does minimum viable recovery actually mean for your business? Where should you be on the maturity curve? What are the must-have capabilities vs. nice-to-haves? How do high-performing organizations approach resilience differently?

Dal feedback del cliente al valore del cliente

Il Readiverse exists because we listened to these conversations. We heard what you were asking for – and we built a destination that delivers it.

This isn’t a content marketing play. It’s not a place to promote products or push sales messages. It’s a purpose-built learning platform designed to make you more successful by giving you what you’ve been asking for all along:

Strategic resources you can use immediately: Readiness assessments, regulatory guides, and intelligence briefs that help you operate more effectively in your role. Bold Takes: 60-second executive perspectives on what matters right now in cyber resilience.

Intelligence that matters to your business: Analysis of emerging threats, market shifts, and regulatory changes, filtered through a business impact lens by experts who’ve been in your seat.

Peer learning and expert insight: Conversations with other CXOs navigating the same challenges. Technical deep-dives from our field experts. Hands-on workshops that sharpen response capabilities.

L’altitudine più adatta alle vostre esigenze

Ciò che rende diverso ilReadiverse different is that it operates at two altitudes, because you do, too.

If you’re a CISO or CIO, you need executive-level insight for board meetings and strategic planning. But you also need practical, tactical guidance when you’re pressure-testing incident response plans or implementing new recovery capabilities.

If you’re a practitioner, you need hands-on skills to respond when the alert comes at 2 a.m. But you also want to understand the strategic context so you can grow in your career and contribute to bigger conversations.

Il Readiverse serves both mindsets. Both altitudes. Because readiness isn’t just about tools and technology. It’s about building awareness and capability across every stage of the cyber resilience lifecycle.

Una destinazione sempre attiva per l’apprendimento continuo

A key insight from all these customer conversations? Readiness isn’t a one-time achievement. It’s continuous.

Threats evolve. AI advances. Regulations change. Business priorities shift. The resilience strategy that worked last year might not be sufficient for what’s coming next. You need a place you can return to again and again, not just for information, but for strategic guidance, practical learning, and community.

That’s what the Readiverse is built to be: an always-on destination where strategic insight meets practical learning. A living platform that grows and evolves as the threat landscape changes. A place you can rely on to stay ready, not just today, but continuously.

Because a great customer experience isn’t just delivering great technology. It’s being a trusted partner who helps you succeed in your most critical mission: helping keep your business ready for whatever comes next.

Discover the Readiverse at Readiverse.com – built from customer conversations, designed for customer success. We can’t wait to hear what you think and keep these conversations going.

Sarv Saravanan is Chief Customer Officer at Commvault.

More related posts

Thumbnail_Blog-Architect-for-tomorrow-2026

Architect for Tomorrow: Unified Data Protection as the Foundation for Resilience

Read more
Thumbnail_Blog-Dangerous-Silos-IDC-Resops-2026 (1)

The Importance of Recovery Point Objective (RPO) in Your Business Continuity Plan

Read more
Thumbnail_Blog-IDC-Resops-2026

Business Continuity Planning for the Cloud-Native Era

Read more

Here at Commvault, our values – we connect, we inspire, we care, and we deliver – are foundational to everything we do and why it matters.

Questa settimana abbiamo ospitato la nostra riunione trimestrale Global Town Hall e abbiamo presentato i premi CEO Living Our Values per il secondo trimestre dell’anno scorso. Questo programma di premiazione riconosce e celebra a livello globale i nostri Vaulter per l’incredibile lavoro svolto nello scorso trimestre e per aver vissuto ogni giorno i nostri valori.

I’m so proud to announce our FY26 Q2 CEO Living Our Values Award winners and our employee-nominated Vaulters’ Choice Award winner below:

Vincitori del premio CEO

Shree Kumar Bakthavatsalam

Shree Kumar Bakthavatsalam

Courtenay Klein

Courtenay Klein

Mahesh Prakash Rao

Mahesh Prakash Rao

Brandon Smith

Brandon Smith

Masao Watanabe

Masao Watanabe

Vaulters’ Choice Award Winner

Mia Watson

Mia Watson

Questi Vaulter sono un esempio illuminante di cosa significhi veramente far parte di Commvault. Per saperne di più su cosa significa lavorare in Commvault, visitate il nostrosito dedicato alle carriere.

More related posts

Thumbnail_Blog-Architect-for-tomorrow-2026

Architect for Tomorrow: Unified Data Protection as the Foundation for Resilience

Read more
Thumbnail_Blog-Dangerous-Silos-IDC-Resops-2026 (1)

The Importance of Recovery Point Objective (RPO) in Your Business Continuity Plan

Read more
Thumbnail_Blog-IDC-Resops-2026

Business Continuity Planning for the Cloud-Native Era

Read more

It shouldn’t come as a surprise, but AI is no longer a trend. It is the foundational capability embraced in every corner of your organization. However, the rush to automate and accelerate an organization’s strategies and processes is introducing new complexities and risks to an organization’s resilience.The good news is this rapid investment and innovation has enabled us – as CIOs – to have healthier, more productive conversations with senior leaders who want to better understand how AI impacts the organization’s risk and resilience. They are no longer asking if the data is backed up.Today, our conversations with the C-suite are all about whether we can trust the massive amount of AI-generated data that is being used to drive critical decisions. It forces us to rethink resilience in the AI era. After all, between the complexity and autonomy of AI systems, and the speed and scale at which the data is growing, there are new risks like model bias, data leakage, and an over-reliance on automation.Consequently, resilience has evolved from just protecting the infrastructure to protecting the integrity of our decision-making capabilities. It’s up to us as CIOs to navigate AI’s use and governance internally as well as our readiness and resilience in the event of disruption or a cyberattack.At Commvault, we are moving quickly to experiment with AI in ways that add value, but not recklessly. With transparency, accountability, and business alignment as our core principles, we believe governance isn’t a checklist – it must guide decision-making. We’ve also added guardrails around data access, use, and resiliency.Additionally, the complexity and expansive scale of AI presents new gaps for bad actors to exploit. In response, we are partnering with our CISO and security team. By bringing our resilience priorities, organizations, and systems closer together, we are better able to detect, respond, and if necessary, recover our AI data following a disruption. One team without the other won’t work.Finally, the AI evolution is also elevating the skills required for IT teams. While technical depth is essential, we need team members who are curious, adaptable, and understand not just how AI works, but how it fits into workflows, governance models, and resilience planning. This includes having strong communicators aligned with the business functions who can help us translate AI’s impact in business terms and measure ROI.In summary, AI doesn’t replace the fundamentals of resilience; it raises the stakes. The organizations that will thrive are those that can harness AI to move faster and smarter, while at the same time building the guardrails and recovery strategies that keep them strong when things go wrong.Resilience is no longer just about surviving disruptions. Organizations must create the confidence to innovate boldly, knowing we can adapt and recover at scale. To learn more, I encourage you to register for Commvault’s Virtual SHIFT event on Nov. 19.Ha Hoang is Chief Information Officer at Commvault.

More related posts

Thumbnail_Blog-Architect-for-tomorrow-2026

Architect for Tomorrow: Unified Data Protection as the Foundation for Resilience

Read more
Thumbnail_Blog-Dangerous-Silos-IDC-Resops-2026 (1)

The Importance of Recovery Point Objective (RPO) in Your Business Continuity Plan

Read more
Thumbnail_Blog-IDC-Resops-2026

Business Continuity Planning for the Cloud-Native Era

Read more

Every organization wants to believe it’s ready for a cyberattack. But “ready” and “resilient” aren’t the same thing. Readiness means you have a plan. Resilience means you know it will work – fast, clean, and under pressure. To stay resilient, your cyber recovery readiness must evolve alongside your business and the ever-changing threat landscape.

Per saperne di più sulla pianificazione della preparazione al ripristino informatico, leggetequi.

The goal is to keep your recovery capabilities aligned with what matters most to your organization. That’s wqui minimum viable recovery (MVR) comes in. Commvault and GigaOm define MVR as the minimum level of recovery performance your organization must achieve to maintain critical operations after a cyberattack.

MVR vi aiuta a concentrarvi innanzitutto sul ripristino delle funzioni aziendali essenziali, in modo da poter riprendere le operazioni più rapidamente e con una sicurezza misurabile.

Scaricate ilRapporto GigaOm sul “Minimum Viable Recovery”per scoprire come potete portare la prontezza al livello successivo.

Cyber Recovery Valutazione della redditività minima

Understanding cyber recovery theory is one thing. Knowing how ready your organization truly is? That’s another. The Commvault Minimum Viability Self-Assessment helps you close that gap.

In just a few minutes, it evaluates your current recovery capabilities, highlights potential vulnerabilities, and benchmarks your readiness against industry best practices. The result is a personalized report that shows wqui you stand today and what steps to take next to advance toward MVR – helping your business recover faster, with greater confidence and measurable resilience.

Take the assessment.

Workshop sulla resilienza informatica

Questo workshop interattivo, offerto in città di tutto il mondo, guida i partecipanti attraverso il processo di creazione di un solido piano di ripristino informatico. Utilizzando scenari reali, il workshop aiuta le organizzazioni a sviluppare strategie per resistere e riprendersi dagli attacchi informatici.

Sign up for a workshop.

Don’t Wait to Act

If you wait for a cyberattack to expose your weaknesses, it might be too late. By taking a proactive approach to cyber recovery readiness, you can help minimize the impact of an attack, avoid costly downtime, and support continuous business.

Cyber recovery readiness isn’t just about technology; it’s about having the right mindset, the right skills, and the unwavering determination to protect your organization. It’s also about rigorously testing your recovery plans to validate they work when you need them most. Leverage Commvault’s resources and expertise to help assess your current posture, develop a comprehensive plan, and build a truly resilient organization.

Because in the end, resilience isn’t luck. It’s preparation, proven.

Chris DiRado is Principal Technologist, Product Experience, at Commvault.

 

More related posts

Thumbnail_Blog-Architect-for-tomorrow-2026

Architect for Tomorrow: Unified Data Protection as the Foundation for Resilience

Read more
Thumbnail_Blog-Dangerous-Silos-IDC-Resops-2026 (1)

The Importance of Recovery Point Objective (RPO) in Your Business Continuity Plan

Read more
Thumbnail_Blog-IDC-Resops-2026

Business Continuity Planning for the Cloud-Native Era

Read more

Punti di forza

  • Commvault’s Data Rooms offering transforms backup data into trusted, AI-ready assets while helping maintain governance and compliance.
  • L’offerta è un ponte tra la protezione dei dati e l’attivazione dell’IA senza creare nuovi rischi per la sicurezza o richiedere un’altra platform.
  • Si integra con gli ecosistemi AI esistenti, come Microsoft Azure e Snowflake, utilizzando standard aperti come Apache Parquet e Iceberg.
  • Built-in governance helps enable secure data curation, classification, and sharing within a zero-trust architecture.
  • Attivando i dati storici, le organizzazioni possono contribuire ad accelerare l’innovazione dell’IA, l’analisi e i flussi di lavoro di conformità in modo sicuro.

AI innovation depends on data – but not just any data. It depends on trusted, governed, and accessible data. Yet for most enterprises, the data that could fuel AI lives deep within backups, scattered across environments, and wrapped in compliance constraints. That’s where Commvault’s Data Rooms offering comes in.

Accelerare l’intelligenza artificiale in modo sicuro

Commvault’s Data Rooms offering transforms backup data – one of the most complete and trusted datasets an organization owns – into AI-ready assets. This new offering helps enterprises safely connect their data to AI and analytics platforms, without creating new risks or complexity.

Unlike other approaches that bring AI models into backup environments, expanding the attack surface and compliance exposure, Commvault does the opposite. We bring governed, policy-controlled data to the AI ecosystems customers already use, preserving their freedom of choice and avoiding vendor lock-in.

The Data Rooms offering is not another AI platform. It’s the bridge between data protection and data activation, designed to make your existing AI investments work faster and safer. It does this by creating governed, policy-controlled “rooms” inside Commvault Cloud – spaces where data can be classified, curated, and shared securely with AI and analytics tools without leaving the protection boundary.

Ascoltare i clienti: Basta con la proliferazione Platform

We heard customers loud and clear: You don’t need another AI platform. You need a secure, simple way to use the data you already protect – across the AI tools and ecosystems you’ve already chosen.

That’s why Commvault built Data Rooms to integrate with partners like Microsoft Azure and Snowflake using open-standard formats such as Apache Parquet and Iceberg. This helps you keep your data portable, policy-compliant, and ready for activation – wherever your AI strategy takes you.

Trasformare la protezione dei dati in attivazione dei dati

With Data Rooms, authorized users can discover, classify, and prepare data directly from backup repositories – across on-premises and cloud environments. Built-in governance helps maintain control, allowing only approved datasets to be shared, with automated classification, sensitivity tagging, redaction, and audit trails applied every step of the way.

Data Rooms acts as a governed, policy-controlled workspace inside Commvault Cloud – where data can be securely curated and made available to AI or analytics tools without leaving the protection boundary. This governed design provides a secure bridge between backup data and activation workflows, helping organizations unlock their information for innovation while maintaining full compliance and control.

Data Rooms can help you:

  • Accelerate insights: Quickly find and export historical data in AI-friendly formats to train models or power analytics.
  • Simplify operations: Eliminate brittle ETL pipelines with automated data discovery and curation.
  • Maintain compliance: Keep governance intact with policy-based controls and traceability from backup to activation.

La fiducia come base per un’IA responsabile

Nella fretta di adottare l’intelligenza artificiale, la fiducia finisce spesso per essere una vittima collaterale. Secondo un recentestudio, roughly three-quarters of surveyed IT leaders said that using AI could make their organizations more vulnerable toattacchi informatici. That’s why Commvault built Data Rooms within Commvault Cloud’s zero-trust architecture, complete with encryption, RBAC, and audit-ready compliance.

By combining data protection, governance, and activation in one platform, Commvault enables enterprises to accelerate AI innovation without compromising security, compliance, or control.

Accelerare l’innovazione senza aggiungere rischi

Commvault’s Data Rooms offering helps organizations move faster by making data safely accessible to the tools that drive their business forward – from AI model training to analytics, eDiscovery, and compliance automation. Because when backup data becomes usable data, enterprises unlock years of historical intelligence and context that most AI models simply don’t have.

As Pranay Ahlawat, Commvault’s Chief Technology and AI Officer, said: “Organizations are beginning to realize that their historical data is more than just insurance – it’s a powerful, untapped strategic asset. With Commvault Data Rooms, enterprises can confidently export their secondary data and harness it with the AI platform of their choice to unlock new opportunities for intelligence, innovation, and business growth.”

Perché è importante ora

Commvault’s Data Rooms offering redefines what’s possible for enterprises that want to innovate responsibly. They make it possible to move from protecting data to activating data – safely, flexibly, and at scale.

In short: Commvault isn’t building another AI platform. We’re building the foundation that lets every AI platform work better – because when data is protected, trusted, and ready for activation, innovation happens faster.

Domande frequenti

Q: What is Commvault’s Data Rooms offering?

A: Commvault Data Rooms is a new capability within Commvault Cloud that helps enterprises safely discover, classify, and activate backup data for AI and analytics. It bridges data protection and data intelligence, giving organizations governed, self-service access to trusted data assets for analysis and innovation.

Q: How does Data Rooms differ from other AI data solutions?

A: Most AI data prep tools work only on live or production data, creating compliance and cost challenges. Data Rooms works from backup data – data that’s already protected and governed – bringing a unique balance of accessibility, compliance, and trust. It’s built into Commvault Cloud’s policy-controlled environment, so it’s part of a unified cyber resilience platform.

Q: What benefits do organizations gain from using Data Rooms?

A: Organizations can help accelerate AI and analytics insights, simplify data operations by reducing ETL complexity, and maintain compliance through automated classification, tagging, and auditing processes.

Q: How does Data Rooms support data security and compliance?

A: Data Rooms operates within Commvault Cloud’s zero-trust architecture, applying classification, redaction, and audit-ready controls automatically. It helps maintain data privacy, traceability, and compliance throughout the data lifecycle, aligning with internal and regulatory governance standards.

Q: What types of AI or analytics platforms can connect with Data Rooms?

A: Data Rooms integrates with leading cloud and AI partners such as Microsoft Azure and Snowflake, supporting open-standard data formats like Apache Parquet and Iceberg for maximum flexibility and portability.

Q: Why is this offering important for enterprises today?

A: As organizations accelerate AI adoption, Data Rooms enables them to responsibly unlock the value of historical, protected data – fueling innovation while maintaining trust, compliance, and control.

 

Vir Choksi is Principal Product Marketing Manager at Commvault.

 

More related posts

Thumbnail_Blog-Architect-for-tomorrow-2026

Architect for Tomorrow: Unified Data Protection as the Foundation for Resilience

Read more
Thumbnail_Blog-Dangerous-Silos-IDC-Resops-2026 (1)

The Importance of Recovery Point Objective (RPO) in Your Business Continuity Plan

Read more
Thumbnail_Blog-IDC-Resops-2026

Business Continuity Planning for the Cloud-Native Era

Read more

Resilienza conversazionale: il nuovo modo di gestire e proteggere i dati aziendali

Conversational resilience is a Commvault® Cloud capability that lets you manage and protect data through natural language.

Autore su LinkedIn
Vir Choksi, Principal Product Marketing Manager, Commvault
Pubblicato

Updated May 2026

Punti di forza

AI-enabled conversational resilience transforms data protection by helping enable secure, governed, natural-language control of workloads – directly within the tools enterprise teams already use.

  • Natural-language data protection via AI assistants (ChatGPT, Claude) in Commvault® Cloud.
  • Azioni basate sull’IA, regolamentate e verificabili, in linea con i principi aziendali di IA responsabile e con il quadro di riferimento NIST per la gestione dei rischi legati all’IA.
  • Attivazione diretta dei flussi di lavoro di protezione all’interno degli ambienti applicativi e DevOps.
  • Esecuzione decentralizzata con supervisione, conformità e controllo dei costi centralizzati.
  • Protezione semplificata dei carichi di lavoro cloud-native con modifiche operative minime.

La vostra azienda globale opera attraverso data center on-premise e diversi ambienti cloud, creando un panorama complesso per la protezione dei dati. Gestite centinaia di policy, posizioni di archiviazione, integrazioni delle identità e requisiti di conformità.

When a security incident occurs – or an audit requires proof of recoverability – you likely must navigate multiple consoles, review logs, confirm configurations, and execute recovery workflows under tight deadlines. At the same time, business stakeholders look to you for clear answers about risk exposure and recovery posture.

Anche le attività di routine, come la verifica della copertura dei backup o l’esecuzione di test di Recovery, richiedono in genere conoscenze specialistiche e un intervento manuale. Questa complessità può rallentare i tempi di risposta, aumentare il rischio di errore umano e creare attriti tra i team di sicurezza, infrastruttura e conformità.

Conversational resilience is a capability in Commvault Cloud that replaces console-hopping and manual workflows with natural language – so your team can ask questions about risk posture, validate backup coverage, and initiate recoveries directly. The result: less manual effort and faster response times, even across complex, multi-team environments.

14.056 dollari

Il costo medio dei tempi di inattività al minuto trasforma gli attriti operativi durante la Recovery in qualcosa di più di un semplice inconveniente: diventa un rischio aziendale misurabile.

Interruzioni dei servizi IT: costi e contenimento nel 2024. Enterprise Management and Associates

Che cos’è la resilienza conversazionale?

La protezione dei dati si è a lungo affidata a specialisti che gestivano console, script e flussi di lavoro complessi. La resilienza conversazionale introduce una nuova interfaccia: il linguaggio naturale.

With conversational resilience, you interact with Commvault® Cloud through supported generative AI assistants such as Anthropic’s Claude or OpenAI’s ChatGPT Enterprise. Instead of switching dashboards or writing API calls, you can issue requests like, “Check my backup status” or “Set up protection for Docusign.”

This capability is built on Commvault’s Model Context Protocol (MCP) server. MCP securely translates natural language intent into validated, policy-driven actions inside Commvault Cloud. Rather than a standalone chatbot layered onto the platform, this is a standards-based integration built to work within your existing enterprise controls.

Come funziona la resilienza conversazionale?

La resilienza conversazionale collega gli assistenti AI a Commvault Cloud tramite tMCP, uno standard aperto introdotto da Anthropic per garantire un’interazione sicura da sistema a sistema.

When you submit a request through a supported assistant, it’s routed through Commvault’s MCP server. MCP authenticates your identity, validates permissions using role-based access controls (RBAC), and executes authorized API calls. Every action is logged for auditing – with authentication, encryption, and policy enforcement built directly into the conversational workflow.

Poiché MCP è basato su standard, è progettato per interagire con gli assistenti che supportano il protocollo. Commvault ha verificato l’integrazione con Claude e prevede di estendere il supporto nel tempo.

MCP also enables integration across a broader AI ecosystem – supporting orchestrated recovery tasks, workflow automation, and connections to IT service platforms – while maintaining centralized governance.

Why Does Conversational Resilience Matter?

La resilienza informatica operations are growing more complex. Multi-cloud architectures, SaaS expansion, and evolving cyber threats demand speed and precision – often from lean teams.

Conversational resilience helps reduce friction between intent and action. You describe what you want to accomplish in plain language, and authorized actions help execute within defined controls. That helps accelerate workflows, reduce manual steps, and support faster response to incidents or policy changes.

It also helps broaden operational accessibility. Teams can complete guided tasks without deep console expertise, while administrators retain full control through RBAC and audit logging.

Most importantly, it helps preserve governance. Every request is authenticated, authorized, and recorded. The conversational interface helps extend enterprise safeguards into AI-enabled workflows rather than bypassing them.

As AI becomes embedded across IT environments, resilience platforms must integrate securely. Conversational resilience helps align cyber operations with that shift.

Competenze chiave

  • Natural language interaction with Commvault Cloud
    : gli utenti possono verificare lo stato dei backup, avviare operazioni di Recovery e configurare la protezione utilizzando un linguaggio semplice tramite gli assistenti AI supportati, consentendo ai team di lavorare più rapidamente.
  • Standards-based integration via MCP
    conversazionale collega gli assistenti AI a Commvault Cloud tramite MCP, uno standard aperto per l’interazione sicura tra sistemi che si allinea all’architettura aziendale e ai requisiti di integrazione.
  • Enforcement of authentication, encryption, and RBAC
    Ogni richiesta conversazionale viene autenticata, crittografata e convalidata in base ai modelli RBAC, preservando le politiche di sicurezza stabilite all’interno dei flussi di lavoro abilitati all’IA.
  • Policy-driven API execution within defined permissions
    definiti L’input in linguaggio naturale viene tradotto in chiamate API autorizzate che operano rigorosamente nell’ambito dei ruoli e delle politiche assegnati, riducendo il rischio di configurazioni errate o modifiche non autorizzate.
  • Full audit logging of conversational actions
    conversazionali Tutte le richieste e le azioni risultanti vengono registrate tramite meccanismi di audit consolidati, garantendo la tracciabilità per le verifiche di conformità e le indagini.
  • Extensible integration across supported AI assistants and IT platforms
    IT supportati Il framework MCP è progettato per interagire con assistenti IA e sistemi aziendali compatibili, contribuendo a supportare l’orchestrazione dei flussi di lavoro pur mantenendo una governance centralizzata.

Integrazione senza soluzione di continuità

Work with AI assistants and IT platforms you already use – with more integrations on the way.

  • Claude (Anthropic)

  • ChatGPT Enterprise (OpenAI)

  • Docusign

  • ServiceNow

  • Commvault MCP Server (GitHub –open source)

In che modo si connettono i client AI?

  • In che modo i client AI avviano le richieste?

    Gli assistenti AI, le applicazioni e le interfacce conversazionali si connettono tramite l’MCP per richiedere in modo sicuro il contesto aziendale e attivare azioni approvate.

  • In che modo viene protetto il canale MCP?

    Ogni client comunica tramite un canale MCP crittografato che consente di autenticare le richieste, applicare le politiche e proteggere i dati aziendali sensibili durante il trasferimento.

  • In che modo i server MCP traducono le richieste?

    MCP servers (such as Commvault’s and other compatible systems) interpret requests, apply governance rules, and translate natural language prompts into structured system operations.

  • In che modo il livello API esegue le attività?

    Le API REST standard o proprietarie eseguono le query sui dati sottostanti e le azioni delle applicazioni, contribuendo a verificare l’accuratezza, la coerenza e l’esecuzione controllata.

  • In che modo le piattaforme aziendali forniscono i risultati?

    Le piattaforme aziendali come Commvault e ServiceNow forniscono dati contestuali, eseguono flussi di lavoro e restituiscono i risultati agli utenti attraverso un’esperienza unificata e conversazionale.

Per capire come questi elementi siano collegati tra loro, consulta il diagramma dell’architettura riportato di seguito. Esso illustra come i client di intelligenza artificiale accedano in modo sicuro ai sistemi aziendali e interagiscano con essi.

La protezione dei dati nelle conversazioni è adatta al mio team?

La resilienza delle conversazioni è pensata sia per gli specialisti che per i non specialisti che devono agire rapidamente in materia di protezione dei dati.

Per gli amministratori della sicurezza e del backup, contribuisce ad accelerare la risposta agli incidenti riducendo le operazioni manuali e consentendo una convalida, un’analisi e un ripristino più rapidi tramite il linguaggio naturale.

For IT leaders, application owners, and compliance stakeholders, it helps provide clear visibility into protection status and risk posture – without requiring deep expertise in backup systems or multiple consoles.

Questa interfaccia condivisa aiuta i team ad allinearsi più rapidamente, a rispondere con sicurezza e a operare nel rispetto dei controlli di governance stabiliti.

Conversational Resilience helps reduce the gap between knowing there’s a problem and doing something about it. Replacing console-hopping and manual workflows with governed natural-language interactions can help security and operations teams validate coverage, initiate recovery, and respond to incidents in fewer steps – without increasing risk or stepping outside established access controls. For enterprises managing complex, multi-cloud environments with lean teams, that speed is measurable.

Domande frequenti

Che cos’è la resilienza conversazionale?

Conversational resilience is a Commvault Cloud capability that helps allow teams to interact with their backup and recovery environments using natural-language prompts through enterprise AI assistants such as ChatGPT Enterprise and Claude. It simplifies operations, helping users perform protection and recovery tasks through intuitive, plain-language interactions – without navigating multiple consoles or requiring deep platform expertise.

Cosa sono le “operazioni agenziali”?

Le operazioni agenziali vanno oltre la semplice chat, consentendo agli assistenti AI di agire per conto degli utenti autorizzati entro limiti di governance definiti. In Commvault Cloud, queste operazioni sono integrate nel server MCP, consentendo di automatizzare i flussi di lavoro di ripristino e protezione nell’ambito di processi controllati da policy, basati sui ruoli e verificabili.

D: Come funziona l’MCP?

MCP acts as a bridge between generative AI assistants and Commvault Cloud. It helps convert natural-language requests into authenticated API calls that run within existing enterprise policies. MCP actions pass through standard REST APIs – so RBAC, authentication, and event logging apply automatically.

Come vengono gestite e rese trasparenti le operazioni?

MCP è progettato per l’automazione controllata da policy. Le attività avviate attraverso flussi di lavoro conversazionali o agenziali vengono registrate e soggette ad autorizzazioni RBAC. Queste funzionalità sono allineate alNIST AI Risk Management Framework(AMF 1.0) e ai principiCommvault’s Responsible AIper aiutare i clienti a mantenere la supervisione e la responsabilità.

In che modo differiscono la resilienza conversazionale e quella agentica?

La resilienza conversazionale consente agli utenti di richiedere informazioni o avviare attività di protezione e ripristino utilizzando il linguaggio naturale. La resilienza agenziale sviluppa tale capacità consentendo agli assistenti AI, in base a criteri definiti dal cliente, di eseguire azioni approvate con piena visibilità e audit trail.

Quali carichi di lavoro e sistemi sono attualmente supportati?

La resilienza conversazionale supporta attualmente i flussi di lavoro di Backup and Recovery per Docusign, con ulteriori carichi di lavoro in programma. Tramite MCP, si integra anche con piattaforme di servizi IT come ServiceNow, consentendo agli utenti di creare e aggiornare gli incidenti relativi ai processi di Backup and Recovery direttamente tramite conversazione.

Esplora le risorse correlate

Visualizza tutte le risorse
Video dimostrativo

Scopri la resilienza conversazionale in azione

Watch how Commvault’s MCP server connects Claude to your backup environment — and see a live recovery workflow triggered entirely through natural language.
Guarda il video dimostrativo su
Scheda tecnica

L’intelligenza artificiale in Commvault Cloud

Dall’automazione e dall’apprendimento automatico all’intelligenza artificiale avanzata, scopri come Metallic AI contribuisce a garantire maggiori prestazioni ed efficienza in ogni aspetto della Commvault Cloud Platform.
Leggi la scheda tecnica su
Libro bianco

Verso un futuro sicuro per l’intelligenza artificiale

Scopri come Commvault aiuta le organizzazioni a progredire con l’IA, proteggendo al contempo i dati più importanti.
Leggi il white paper sul

We’re proud to announce that Commvault has been named a Market Leader Cyber Resilience in the 2025 Top InfoSec Innovator Awards, presented by Cyber Defense Magazine.“Commvault embodies three major features we judges look for with the potential to become winners: understanding tomorrow’s threats today; providing a cost-effective solution; and innovating in unexpected ways that can help mitigate cyber risk and get one step ahead of the next breach,” said Gary S. Miliefsky, the magazine’s publisher.This recognition celebrates organizations that are innovating in unexpected and effective ways – providing cost-efficient, cutting-edge cybersecurity solutions that help businesses mitigate risk and stay one step ahead of evolving threats.

Rafforzare la resilienza informatica per il mondo reale

As cyber threats become more complex and persistent, organizations need solutions that go beyond prevention – they need the ability to recover their applicazioni minime vitali quickly and continue operating with confidence. Commvault’s industry-leading cyber resilience portfolio, Commvault® Cloud, helps customers do just that.By unifying advanced data protection, threat detection, and autonomous recovery orchestration, Commvault enables enterprises to anticipate, withstand, and recover from attacks – empowering them to safeguard their business continuity and reputation in a dynamic threat landscape.

Impegno per l’innovazione continua

“This award underscores Commvault’s leadership in helping organizations prepare for and respond to the cyber challenges of today and tomorrow,” said Bill O’Connell, Chief Security Officer at Commvault. “Our mission is to empower customers with intelligent, integrated solutions that make cyber resilience achievable and measurable – so they can stay focused on driving their business forward, not fighting fires.”

Guardare avanti

Mentre le minacce continuano ad evolversi, Commvault rimane impegnata a fornire una cyber resilience di nuova generazione attraverso l’intelligenza, l’automazione e la fiducia. Questo riconoscimento riflette la nostra costante dedizione nell’aiutare i clienti a superare in astuzia, in durata e in prestazioni anche le minacce informatiche più sofisticate.Per saperne di più su come Commvault aiuta le organizzazioni a costruire la resilienza contro il ransomware e i cyberattacchi, partecipate ai nostri prossimieventi SHIFT NYCoSHIFT Virtual.Thomas Bryant is Senior Director, Product Marketing, at Commvault.

Blog correlati

More related posts

Cyber Resilience

Read more

Il ransomware si è evoluto di nuovo. È più veloce, più intelligente e più mirato che mai. Quello che una volta era un fastidio per la crittografia dei dati è diventato un motore di interruzione dell’attività su larga scala, alimentato dall’intelligenza artificiale, dall’automazione e da un’economia del crimine informatico professionalizzata.

Nel 2026, il ransomware non riguarderà solo i file bloccati. Si tratta di identità rubate, catene di fornitura compromesse e paralisi operativa che può diffondersi in pochi minuti.

“Agentic AI can reason, plan,eact autonomously, adapting attacks in real timeelearning from defenders faster than they can respond,” Govind Rangasamy, head of Recovery Solutionsevice president of Portfolio Marketing at Commvault, wrote in his book, The Cyber Resilience Reckoning.

Nei test controllati citati nel libro, il ransomware guidato dall’intelligenza artificiale ha ottenuto l’esfiltrazione completa dei dati 100 volte più velocemente degli aggressori umani. Questo rappresenta un cambiamento fondamentale che richiede difese altrettanto intelligenti.

Per i CISO e i leader IT, il 2026 sarà l’anno in cui la resilienza sostituirà la prevenzione come vera misura della preparazione.

Trend 1: Agentic AI Ransomware Takes the Lead

Gli attori delle minacce stanno ora impiegando l’IA agenziale, ovvero sistemi autodiretti che pianificano ed eseguono campagne end-to-end. A differenza degli strumenti tradizionali che seguono gli script, questi agenti di IA possono adattarsi alle difese di rete, cambiare i payload durante l’attacco e imparare dalle risposte del rilevamento.

Questa capacità potrebbe rendere obsoleti i playbook tradizionali. I difensori devono far fronte agli attacchi a velocità automatica con il rilevamento assistito dall’intelligenza artificiale, l’analisi comportamentale e i test di ricostruzione automatizzati che convalidano l’integrità del ripristino in modo continuo.

Trend 2: Identity Confidence Becomes the New Perimeter

After years of focus on “identity-centric” security, 2026 marks a new stage. Identity confidence, not just access control, will define cyber resilience.

Gli aggressori stanno sfruttando token rubati, chiavi API e autorizzazioni configurate in modo errato per muoversi all’interno di ambienti ibridi senza innescare allarmi. La sfida non consiste più nel verificare chi sia una persona, ma nel sapere se quell’identità sia ancora affidabile dopo essere stata compromessa.

As Rangasamy writes, “Resilience isn’t about avoiding failure. It’s about bouncing back from it.”

La verifica continua e le ricostruzioni pulite e verificabili dell’infrastruttura di identità aiutano a ripristinare la fiducia più velocemente di quanto gli aggressori possano fare.

Trend 3: Supply ChaineSaaS Exploitation Accelerates

Le bande di ransomware prendono sempre più di mira gli ecosistemi SaaS e di terze parti, dove una violazione può colpire centinaia di organizzazioni. Le piattaforme RaaS ora automatizzano la ricognizione delle relazioni con i fornitori, esponendo credenziali condivise, pipeline CI/CD e collegamenti API.

Le normative del 2026 richiederanno prove di resilienza del fornitore. Ciò significa non solo i rapporti SOC 2, ma anche la prova della capacità di ricostruzione delle dipendenze.

Trend 4: Ransomware-as-a-Service Goes Corporate

Quello che una volta assomigliava a un mercato di hacker ora funziona come un franchising di software. Gli operatori RaaS offrono prezzi differenziati, assistenza tecnica e personalizzazione agli affiliati.

Questa industrializzazione del crimine informatico significa che anche gli attori poco qualificati possono noleggiare kit ransomware potenziati dall’intelligenza artificiale. Le organizzazioni devono considerare il RaaS come un vero e proprio concorrente del settore che innova più velocemente della maggior parte dei difensori aziendali.

Trend 5: Data ExtortioneDeepfake Blackmail Rise

Gli attacchi di sola crittografia stanno diventando meno comuni. Gli aggressori ora combinano il furto di dati, i deepfake generati dall’intelligenza artificiale e le comunicazioni sintetiche per estorcere pagamenti o danneggiare la reputazione. Questa nuova ondata di ransomware psicologico arma la fiducia stessa, non solo la tecnologia.

Trend 6: Resilience Becomes the Metric That Matters

Le aziende leader stanno spostando l’attenzione dalla difesa alla resilienza dimostrata.
Rangasamy defines true cyber resilience as “rebuild confidence” – the verified ability to restore business-critical applications within hours.

La velocità da sola non è più sufficiente. Il ripristino deve essere pulito, non solo veloce.
Commvault’s whitepaper Ridefinire il Recovery informatico: introduzione al Mean Time to Clean Recoverypresenta l’MTCR come un nuovo parametro di riferimento per il successo del ripristino.

MTCR measures how quickly an organization can restore critical services using verified clean data, closing what Commvault calls the cyber resilience gap. It moves beyond traditional recovery time objectiveserecovery point objectives to focus on trust, validation,edata integrity – the factors that determine whether recovery truly works.

I pilastri chiave della resilienza includono ora:

  • Backup immutabili, condotti in aria e convalidati regolarmente.
  • Ricostruzioni automatizzate e guidate da policy di interi stack applicativi.
  • Test caotici costanti per individuare i collegamenti deboli prima che lo facciano gli aggressori.
  • Misurazione e rendicontazione dell’MTCR.
  • Visibilità unificata su dati, identità e infrastruttura.

Trend 7: Cyber InsuranceeRegulation Tighten the Bar

I governiegli assicuratori are increasingly looking for proof of validated recoveryetested rebuild capabilities. Organizations that can demonstrate cleanroom recoveryeverified data integrity see faster claim approvalsestronger regulatory standing. Resilience evidence is quickly becoming as essential as financial audits.

The Bottom Line

Ransomware has matured into a data-driven, AI-accelerated industry. Survival now depends less on stopping every attackemore on recovering faster than the attacker can adapt. Your resilience posture – measured in hours, not days – is now a competitive edge.

As Rangasamy concludes, “The organizations that embrace the Rebuild function today will become those that not only survive tomorrow’s attacks but emerge stronger from them.”

Learn More

Questo blog si basa su approfondimenti tratti daThe Cyber Resilience Reckoning (O’Reilly Media, 2025), written by Commvault Head of Recovery SolutionseVice President of Portfolio Marketing Govind Rangasamy,efrom the Commvault whitepaper Ridefinire il Recovery informatico: introduzione al Mean Time to Clean Recovery. For more perspectives on agentic AI, cyber recovery,eresilience metrics, visit the Readiverse.

Katherine Demacopoulous is Senior Director of Global Content StrategyePrograms at Commvault.

More related posts

Thumbnail_Blog-Architect-for-tomorrow-2026

Architect for Tomorrow: Unified Data Protection as the Foundation for Resilience

Read more
Thumbnail_Blog-Dangerous-Silos-IDC-Resops-2026 (1)

The Importance of Recovery Point Objective (RPO) in Your Business Continuity Plan

Read more
Thumbnail_Blog-IDC-Resops-2026

Business Continuity Planning for the Cloud-Native Era

Read more

Commvault is proud to announce our new designation as an ISC2 Authorized CPE Submitter Partner, recognizing our commitment to advancing cybersecurity knowledge and professional development.

As an authorized submitter, Commvault can now report Continuing Professional Education (CPE) credits directly to ISC2 for participants who attend qualifying Commvault learning programs and events. This means professionals with certifications such as CISSP®, CCSP®, and SSCP® can automatically earn and track CPE credits through Commvault events without the need for manual submission.

Potenziare la comunità della sicurezza informatica

Through this partnership, Commvault joins a select group of organizations authorized to deliver educational content aligned with ISC2’s domains, including:

  • Sicurezza e gestione del rischio
  • Sicurezza Cloud e della rete
  • Risposta agli incidenti e medicina legale
  • La gestione delle identità e degli accessi

Attendees of Commvault webinars, workshops, events, and training courses will benefit from automatic credit reporting and a streamlined process to maintain their certifications.

Una missione condivisa per la resilienza informatica

This partnership strengthens Commvault’s commitment to empowering security and IT professionals with the skills and knowledge needed to help protect and recover data across complex hybrid environments.

Suzanne Klausner is Director, Customer Enablement Strategy, at Commvault.

More related posts

Thumbnail_Blog-Architect-for-tomorrow-2026

Architect for Tomorrow: Unified Data Protection as the Foundation for Resilience

Read more
Thumbnail_Blog-Dangerous-Silos-IDC-Resops-2026 (1)

The Importance of Recovery Point Objective (RPO) in Your Business Continuity Plan

Read more
Thumbnail_Blog-IDC-Resops-2026

Business Continuity Planning for the Cloud-Native Era

Read more

Mentre le organizzazioni adottano l’IA generativa per automatizzare le decisioni, migliorare l’erogazione dei servizi e ottimizzare la gestione dei dati, si imbattono anche in una nuova serie di minacce informatiche che sfruttano l’intelligenza di questi sistemi. Una delle minacce più preoccupanti è l’attacco prompt injection, che utilizza il linguaggio stesso per manipolare il comportamento dell’IA e compromettere la fiducia.

Quando l’intelligence diventa una superficie di attacco

Un attacco di tipo prompt injection manipola le istruzioni che un sistema di intelligenza artificiale riceve. Convince il sistema ad agire contro il suo intento originale inserendo comandi nascosti o ingannevoli nei prompt, nei documenti o persino nei dati esterni che l’IA elabora. Questa forma di attacco è particolarmente pericolosa perché non si basa su exploit di codice tradizionali. Utilizza invece le parole per corrompere i risultati.

Immaginate uno strumento di IA generativa in un contesto di assistenza clienti che venga indotto con l’inganno a rivelare dati riservati o a modificare i flussi di lavoro. In un altro caso, un aggressore potrebbe nascondere istruzioni dannose in un documento di un fornitore, inducendo un sistema basato sull’IA a deviare le spedizioni o ad alterare le fatture. Questi scenari dimostrano come l’interfaccia linguistica dei sistemi di IA sia diventata una nuova superficie di attacco, spesso trascurata.

Settori come quello sanitario, finanziario e manifatturiero stanno già riscontrando esempi di queste tattiche. Istruzioni nascoste nei dati, nelle e-mail o nei moduli possono aggirare silenziosamente i protocolli di sicurezza. Il risultato non è solo l’esposizione dei dati, ma anche l’interruzione delle operazioni.

L’intersezione tra vulnerabilità dell’IA e resilienza informatica

Cybersecurity teams have spent decades hardening networks, encrypting data, and deploying layered defenses. AI introduces a different challenge. These systems do not just store information; they interpret it. When an AI model is compromised, the damage extends beyond data loss. It can impact the accuracy and reliability of automated decisions that influence entire business processes.

This is why cyber resiliency has become essential. True resilience is not only about blocking attacks but also about being able to withstand and recover from them. For AI, resiliency means detecting manipulation early, isolating affected systems, and restoring normal function before significant harm occurs.

Commvault’s approach to cyber resiliency is to help organizations build for this reality. By combining data protection, threat detection, and orchestrated recovery, organizations can maintain data integrity and business continuity even when AI systems are targeted. Commvault’s goal is to provide organizations with the tools to make data not just secure, but verifiably trustworthy and recuperabili.

Riconoscere i segni di un’iniezione tempestiva

Il primo passo per costruire la resilienza è riconoscere quando potrebbe verificarsi un’iniezione immediata. I segnali di allarme più comuni sono:

  • Instruction overrides: Prompts that include phrases like “ignore previous instructions” or “reveal hidden data.”
  • Context switching: Sudden topic changes that move the AI system away from its intended purpose.
  • Encoded or multilingual text: Hidden characters,schemi di codificao comandi in lingua straniera progettati per eludere il rilevamento.
  • Social engineering tactics: Inputs that appear to come from an authority figure or system administrator.

Organizations should monitor AI behavior over time, establishing a baseline for what “normal” looks like. Deviations from expected responses can reveal manipulation attempts before they cause harm.

Difesa in profondità: Applicare i principi di fiducia zero all’intelligenza artificiale

La protezione dei sistemi di intelligenza artificiale richiede la stessa mentalità a più livelli che si è dimostrata efficace nella cybersecurity in senso lato. I principi della fiducia zero possono essere applicati anche in questo caso, ma con una maggiore enfasi sul controllo degli input e degli output.

  1. Validate inputs and outputs. Sanitize prompts before they are processed and review AI-generated responses for unexpected instructions or disclosures.
  2. Segment AI environments. Separate systems that process sensitive information from those that interact with untrusted data sources.
  3. Limit permissions. Use role-based access controls so that even if a model is tricked, it cannot access or modify critical systems.
  4. Continuously monitor behavior. Track AI responses over time to detect patterns that differ from expected norms.

Commvault’s ThreatWise technology can be incorporated as part of an organization’s layered protection. It detects unusual activity across AI data pipelines and flags behaviors that may signal an injection attempt. When combined with other Commvault offerings, such as Commvault Cloud, organizations can integrate early-warning detection with rapid recovery and unified visibility across hybrid environments.

Sicurezza dell’intelligenza artificiale ed elemento umano

La tecnologia da sola non può risolvere questo problema. Molti tentativi di iniezione di prompt hanno successo grazie all’ingegneria sociale piuttosto che a vulnerabilità tecniche. Si basano sulla fiducia umana. I dipendenti che utilizzano strumenti di IA generativa devono comprendere che ogni prompt, file o link può diventare un potenziale vettore di attacco. Una formazione regolare ed esercitazioni di attacchi simulati possono rafforzare la consapevolezza. Quando gli utenti sanno come appaiono gli input sospetti, diventano un livello attivo di difesa piuttosto che un punto debole della catena.

Costruire un’intelligenza artificiale affidabile attraverso pratiche di dati resilienti

L’IA può essere vista come un’estensione dei sistemi di dati aziendali, non come un dominio separato, e Commvault può aiutare i clienti a orientarsi su come proteggere la propria IA. Proteggere l’IA significa innanzitutto proteggere i dati da cui apprende e i risultati che produce. Ciò significa mantenere i set di dati, i modelli e i metadati integri, verificabili erecuperabili.

La resilienza deve essere progettata nel sistema fin dall’inizio. Che la minaccia sia un ransomware, un abuso da parte di persone interne o una sofisticata iniezione di prompt, l’obiettivo rimane lo stesso: preservare l’integrità dei dati e la disponibilità operativa. L’intelligenza artificiale sta trasformando il modo in cui le organizzazioni gestiscono le informazioni, ma i fondamenti della cybersecurity sono ancora validi. La protezione dei dati, il monitoraggio continuo e il ripristino rapido rimangono i pilastri della resilienza in un mondo sempre più intelligente.

Pensiero finale

Gli attacchi di tipo Prompt Injection ci ricordano che innovazione e rischio si evolvono di pari passo. Man mano che le aziende accelerano l’uso dell’IA, devono anche evolvere le loro difese. Inserendo la resilienza informatica in ogni livello delle operazioni supportate dall’IA, le organizzazioni possono adottare nuove tecnologie con fiducia, sapendo che i loro dati e le loro decisioni rimangono sicuri e affidabili.Chris DiRado is Principal Technologist, Product Experience, at Commvault.

More related posts

Thumbnail_Blog-Architect-for-tomorrow-2026

Architect for Tomorrow: Unified Data Protection as the Foundation for Resilience

Read more
Thumbnail_Blog-Dangerous-Silos-IDC-Resops-2026 (1)

The Importance of Recovery Point Objective (RPO) in Your Business Continuity Plan

Read more
Thumbnail_Blog-IDC-Resops-2026

Business Continuity Planning for the Cloud-Native Era

Read more

Every year on October 24, the world pauses for the International Day of Climate Action, reminding us that protecting the planet is no longer a choice, but a shared responsibility. Climate change isn’t coming – it’s here. And how we respond today will shape the future of our communities, our businesses, and our planet.

At Commvault, resilience is what we do – not just for data, but for the world we all share.

Sustainability: The Core of Resilience

Our mission to safeguard data goes hand in hand with our commitment to safeguard the environment. In FY25, we made meaningful progress toward our climate resilience goals:

  • Scope 2 emissions dropped by over 13%, driven by smarter energy use and efficient data center operations.
  • Emissions intensity fell from 12.7 to 9.6 metric tons CO₂e per million USD revenue, showing that growth and sustainability can move forward together.
  • Our LEED-certified headquarters continues to lead with renewable energy integration, water-efficient systems, and robust recycling programs.

In everything from how we power our offices to how we design our technology, we consider sustainability a key driver of business continuity.

Data That Works for the Planet

The same innovation that drives Commvault’s cyber resilience is helping advance climate resilience.

By optimizing data storage, reducing redundancies, and improving workload efficiency, our cloud solutions enable customers to use less energy and achieve their own sustainability goals. Less waste. Lower energy use. More resilience.

Because when data works smarter, the planet breathes easier.

Collective Action, Shared Progress

We know climate action is not a solo mission. That’s why Commvault collaborates with partners who share our environmental values and participates in community initiatives like the Net Zero Institute to help accelerate the transition to a low-carbon economy.

We also align our climate governance with the Task Force on Climate-Related Financial Disclosures (TCFD), driving accountability from the top down.

From Awareness to Action

The path to a sustainable future begins with small, intentional choices, like turning off a light, optimizing a server, rethinking a commute. Every decision matters.

This International Day of Climate Action, let’s all take a step toward progress. Because resilience – whether in data, business, or the environment – is built together.

Aakanksha Kashyap is ESG Specialist at Commvault.

More related posts

Thumbnail_Blog-Architect-for-tomorrow-2026

Architect for Tomorrow: Unified Data Protection as the Foundation for Resilience

Read more
Thumbnail_Blog-Dangerous-Silos-IDC-Resops-2026 (1)

The Importance of Recovery Point Objective (RPO) in Your Business Continuity Plan

Read more
Thumbnail_Blog-IDC-Resops-2026

Business Continuity Planning for the Cloud-Native Era

Read more

Punti di forza

  • As few as 250 poisoned samples can compromise a large AI model – turning your data lake into a prime attack surface.
  • I campioni avvelenati possono impiantare backdoor che persistono anche dopo il retraining o la messa a punto.
  • A practical defense centers on “protect, detect, roll back,” treating data protection as core to AI integrity.
  • Backup, set di dati con versioni e ripristini dettagliati consentono un rapido ripristino a uno stato pulito e affidabile.
  • Commvault + Satori aggiungono funzionalità di rilevamento dei dati, controllo degli accessi in tempo reale, monitoraggio delle attività LLM e policy-plus-rollback unificato per rafforzare la resilienza dell’IA.

I’ve been thinking a lot about Anthropic’s latest research – and it’s unsettling. It found that as few as 250 poisoned samples can compromise a massive AI model.
👉 [Read la ricerca yourself.]

That’s right – a few hundred corrupted files can undo months of training and billions of parameters. Not thousands. Not millions. Just hundreds.

For anyone building or managing AI, this changes everything. Your AI data lake has become your primary attack surface – and if you can’t trust your data, you can’t trust your models.

💣 Small Samples, Big Consequences

Anthropic ha dimostrato che:

  • Una manciata di campioni avvelenati può impiantare backdoor nascoste.
  • Queste vulnerabilità possono persistere anche dopo la riqualificazione e la messa a punto.
  • Attackers don’t need to flood your system – they just need a foothold.

AI integrity isn’t only a model problem – it’s a data protection problem.

🧩 The Practical Defense: Protect. Detect. Roll Back.

In Commvault, vediamo le organizzazioni affrettarsi a costruirepipeline di IA senza garantire completamente la sicurezza delle fondamenta. When data is compromised, your best defense is the ability to roll back to a clean, trusted state.

That’s why backups, versioned datasets, and fine-grained restores are becoming as essential to AI as GPUs and model weights.

Commvault can help you:

  • Cattura istantanee immutabili del tuo data lake.
  • Ripristina una versione funzionante.
  • Verifica la discendenza, la provenienza e la cronologia delle modifiche.
  • Bloccare i backup contro la manomissione (tramite archiviazione WORM).

Because when it comes to AI, protection isn’t just about avoiding failure – it’s about being able to recover fast and clean when it happens.

🔐 The Power of Satori: Smarter, Safer AI Data

With Satori now part of Commvault, we now offer broader data security and AI governance capabilities that can help you:

  • Rileva automaticamente i dati sensibili su cloud, magazzini e laghi.
  • Control access in real time – who sees what, when, and how.
  • Monitorare l’attività dell’IA e dell’LLM per rilevare tempestivamente eventuali anomalie.
  • Unify policy and rollback – restoring data and supporting compliance from one place.

Together, Commvault + Satori provide resilient, intelligent data foundation capabilities that help detect, protect, and recover from evolving AI data threats.

🚀 The Future of AI Resilience

This is exactly what we’ll be discussing at Commvault Shift | Virtual – how to secure, protect, and recover the data that drives AI.

Join us to hear from industry leaders about building trusted, resilient AI systems that can help withstand data corruption, cyber threats, and human error.

👉 Register here: commvault.com/shift-virtualProteggi la tua IA. Proteggi i tuoi dati. Costruisci un futuro più resiliente.

Domande frequenti

Q: What does “250 poisoned files” actually mean for my models?
A: The blog cites Anthropic’s finding that only a few hundred corrupted samples can meaningfully compromise a massive model – no flood required. It highlights that attackers need only a small foothold to degrade behavior or implant triggers.

Q: Why might retraining fail to remove poisoning?
A: Some backdoors survive standard retraining and fine-tuning because the malicious signal is subtle and reinforced by the broader dataset. The result is a model that behaves normally until a hidden trigger appears.

Q: What immediate defenses should we prioritize?
A: Adopt a “protect, detect, roll back” strategy: Secure your data pipeline, monitor for anomalies, and maintain the ability to revert to a known-good state. Treat data protection as foundational – on par with model weights and GPUs.

Q: How do backups and versioned datasets help in practice?
A: Immutable snapshots, version history, and fine-grained restores enable you to quickly recover clean data, verify lineage and provenance, and continue operations without carrying hidden compromises forward.

Q: What additional value does Satori bring with Commvault?
A: Satori expands capabilities with automatic discovery of sensitive data across clouds and lakes, real-time access control, LLM activity monitoring for early anomaly detection, and unified policy plus rollback to support compliance and recovery.

Q: Isn’t model security enough without data protections?
A: Model-centric controls are necessary but incomplete. The post argues that AI integrity is as much a data protection problem as a model problem; without trusted data, even well-secured models can be subverted.

Thomas Bryant is Senior Director, Product Marketing, at Commvault.

Blog correlati:

More related posts

Thumbnail_Blog-Architect-for-tomorrow-2026

Architect for Tomorrow: Unified Data Protection as the Foundation for Resilience

Read more
Thumbnail_Blog-Dangerous-Silos-IDC-Resops-2026 (1)

The Importance of Recovery Point Objective (RPO) in Your Business Continuity Plan

Read more
Thumbnail_Blog-IDC-Resops-2026

Business Continuity Planning for the Cloud-Native Era

Read more