--- title: About FAST LTA date: 2026-05-26T16:03:00+02:00 author: Hannes Heckel canonical_url: "https://www.fast-lta.de/en/fast/about" section: Corporate Pages --- [Compliance](https://www.fast-lta.de/en/blog/compliance "Compliance") [###### Blog Post | 4/14/2026 Document Management Systems and WORM: How DMS and Archive Work Together An audit-proof archiving system requires two components: a DMS for capture, metadata, workflow and search, and a WORM hardware archive for immutability and long-term storage.--- [](https://www.fast-lta.de/en/blog/dms-und-worm-so-arbeiten-dokumentenmanagement-und-archiv-zusammen "Document Management Systems and WORM: How DMS and Archive Work Together")](https://www.fast-lta.de/en/blog/dms-und-worm-so-arbeiten-dokumentenmanagement-und-archiv-zusammen "Document Management Systems and WORM: How DMS and Archive Work Together")[IT resilience](https://www.fast-lta.de/en/blog/it-resilience "IT Resilience")[Ransomware protection](https://www.fast-lta.de/en/blog/ransomware-protection "Ransomware Protection") [###### Blog Post | 6/3/2026 Disaster Recovery Test: How to Test Your DR Plan A DR plan that has never been tested is fiction. This is not an overreaction. It is IT reality. Backups that have not been tested often cannot be restored. Recovery runbooks that have never been rehearsed contain countless errors. RTOs that have never been measured are guesswork.The good news: regular DR tests are not impossible. There are three practical methods, varying in effort and depth.--- [](https://www.fast-lta.de/en/blog/disaster-recovery-test-so-testen-sie-ihren-dr-plan "Disaster Recovery Test: How to Test Your DR Plan")](https://www.fast-lta.de/en/blog/disaster-recovery-test-so-testen-sie-ihren-dr-plan "Disaster Recovery Test: How to Test Your DR Plan")[IT resilience](https://www.fast-lta.de/en/blog/it-resilience "IT Resilience") [###### Blog Post | 5/8/2026 Cyber Resilience vs. IT Security: Why Both Are Necessary Cyber resilience is not an alternative to IT security. It is a **specialisation of IT resilience, focused on cyberattacks**. The distinction matters, because it shows: you cannot neglect one of the two and hope the other will be sufficient.IT resilience is broad. It covers natural disasters, hardware failures, software bugs, human error, and cyberattacks.Cyber resilience is narrow. It deals specifically with recovery from malicious, intelligent attacks designed to destroy your backups and sabotage your recovery.That makes cyber resilience harder: it requires more layers of defence, because the adversary reacts intelligently. The Veeam Ransomware Trends Report 2025 found that in 89% of ransomware attacks, the attackers went after the backup repositories, and on average about a third of those repositories were modified or deleted.--- [](https://www.fast-lta.de/en/blog/cyber-resilienz-vs-it-sicherheit-warum-beides-n%C3%B6tig-ist "Cyber Resilience vs. IT Security: Why Both Are Necessary")](https://www.fast-lta.de/en/blog/cyber-resilienz-vs-it-sicherheit-warum-beides-n%C3%B6tig-ist "Cyber Resilience vs. IT Security: Why Both Are Necessary")[Compliance](https://www.fast-lta.de/en/blog/compliance "Compliance")[Data sovereignty](https://www.fast-lta.de/en/blog/data-sovereignty "Data sovereignty") [###### Blog Post | 1/6/2026 Data Egress Fees: The Hidden Costs of Your Cloud Backup Cloud backup looks cheap on the price list: a few cents per gigabyte per month for archive-tier storage. The surprise comes when you retrieve your data, for a recovery, a migration or a restore test. Outbound transfer (egress) to the internet is typically priced around USD 0.05 to 0.09 per GB at hyperscaler list rates, several times the monthly storage cost of the same gigabyte.At that rate, retrieving 100 TB costs roughly USD 5,000 to 9,000 in transfer fees alone. For backup workloads, where full retrieval is exactly the scenario you are paying for, this changes the economics fundamentally.--- [](https://www.fast-lta.de/en/blog/egress-kosten-die-versteckten-kosten-ihres-cloud-backups "Data Egress Fees: The Hidden Costs of Your Cloud Backup")](https://www.fast-lta.de/en/blog/egress-kosten-die-versteckten-kosten-ihres-cloud-backups "Data Egress Fees: The Hidden Costs of Your Cloud Backup")[Compliance](https://www.fast-lta.de/en/blog/compliance "Compliance")[Ransomware protection](https://www.fast-lta.de/en/blog/ransomware-protection "Ransomware Protection") [###### Blog Post | 3/16/2026 Backup Media Compared: Ransomware Resilience There are many ways to back up data. But not all protect equally well against ransomware. A NAS backup is not the same as a tape backup or a cloud backup, and none of them behaves like an air-gapped disk system. This article compares the most common secondary storage options and evaluates their suitability against ransomware. The benchmark matters: according to the Veeam Ransomware Trends Report 2025, 89 percent of ransomware attacks targeted backup repositories.--- [](https://www.fast-lta.de/en/blog/backup-medien-im-ransomware-vergleich "Backup Media Compared: Ransomware Resilience")](https://www.fast-lta.de/en/blog/backup-medien-im-ransomware-vergleich "Backup Media Compared: Ransomware Resilience")[IT resilience](https://www.fast-lta.de/en/blog/it-resilience "IT Resilience") [###### Blog Post | 5/4/2026 What Is IT Resilience? Definition and Distinctions IT resilience is the ability of an organization to restore its information systems and critical business processes to a functional state quickly after a disruption. It is not the ability to avoid disruptions: it is the ability to absorb them, deal with them, and recover from them. As cyberattacks grow more frequent and more sophisticated, resilience has become an existential question for every organization.The definition can be made more precise: IT resilience is the combination of **prevention, detection, response, recovery, and continuous adaptation**. It responds to the central insight of modern IT security: not if, but when you become the target of an attack. This posture distinguishes resilience fundamentally from security alone.The concept is frequently confused with two related but distinct terms: **high availability** and **IT security**. A clear distinction is essential.--- [](https://www.fast-lta.de/en/blog/was-ist-it-resilienz-definition-und-abgrenzung "What Is IT Resilience? Definition and Distinctions")](https://www.fast-lta.de/en/blog/was-ist-it-resilienz-definition-und-abgrenzung "What Is IT Resilience? Definition and Distinctions")[Compliance](https://www.fast-lta.de/en/blog/compliance "Compliance")[Ransomware protection](https://www.fast-lta.de/en/blog/ransomware-protection "Ransomware Protection") [###### Blog Post | 2/12/2026 How Ransomware Destroys Backups: A Technical Analysis A backup is only as secure as it is difficult to reach and delete. Most organisations store their backups on network shares or cloud storage, both of which are reachable by ransomware. Modern ransomware variants are not naive: they actively search for backups and destroy them before you realise you have been hit. The Veeam Ransomware Trends Report 2025 found that 89 percent of ransomware attacks targeted backup repositories.For IT decision-makers, this understanding is critical: a backup is only a backup if ransomware cannot delete it. This article explains the four main tactics ransomware uses to destroy your backup copies, and how a hardware air gap provides real protection.--- [](https://www.fast-lta.de/en/blog/wie-ransomware-backups-zerst%C3%B6rt-technische-analyse "How Ransomware Destroys Backups: A Technical Analysis")](https://www.fast-lta.de/en/blog/wie-ransomware-backups-zerst%C3%B6rt-technische-analyse "How Ransomware Destroys Backups: A Technical Analysis")[IT resilience](https://www.fast-lta.de/en/blog/it-resilience "IT Resilience") [###### Blog Post | 5/13/2026 IT Resilience: A Board-Level Priority. 5 Arguments for the Executive Suite IT resilience is no longer a technical question. It is a board-level question. At the latest since NIS2 (Directive (EU) 2022/2555) and DORA (Regulation (EU) 2022/2554), executives face personal accountability for inadequate resilience. But compliance is not the only driver. Five hard business arguments demonstrate why resilience investment pays off and why inaction is costly.--- [](https://www.fast-lta.de/en/blog/warum-it-resilienz-chefsache-ist-5-argumente-f%C3%BCr-den-vorstand "IT Resilience: A Board-Level Priority. 5 Arguments for the Executive Suite")](https://www.fast-lta.de/en/blog/warum-it-resilienz-chefsache-ist-5-argumente-f%C3%BCr-den-vorstand "IT Resilience: A Board-Level Priority. 5 Arguments for the Executive Suite")[Compliance](https://www.fast-lta.de/en/blog/compliance "Compliance") [###### Blog Post | 2/3/2026 NIS2 Audit Preparation: Checklist for IT Managers NIS2 (Directive (EU) 2022/2555) is in force across the EU through national implementation acts; in Germany, for example, the NIS2UmsuCG has applied since 6 December 2025, with no general transition period. Supervisory activity for affected organisations is underway. Organisations that enter an audit unprepared risk not just fines: they risk binding remediation orders, public disclosure of security deficiencies, and personal consequences for management.This checklist prepares IT managers and CISOs for NIS2 audits. It follows the measure areas of Article 21 of the directive and adds the specific evidence that auditors consistently request. National acts mirror these areas, so the checklist works EU-wide.**Reading time:** approx. 10 minutes | **Updated:** May 2026--- [](https://www.fast-lta.de/en/blog/audit-vorbereitung-nis2-checkliste "NIS2 Audit Preparation: Checklist for IT Managers")](https://www.fast-lta.de/en/blog/audit-vorbereitung-nis2-checkliste "NIS2 Audit Preparation: Checklist for IT Managers")[IT resilience](https://www.fast-lta.de/en/blog/it-resilience "IT Resilience") [###### Blog Post | 5/15/2026 IT Resilience Maturity: Self-Assessment for IT Leaders Most organizations do not know where they stand on the resilience maturity scale. They say "We have backups," but that could mean anything: from "someone sporadically copies data to a USB stick" to "a professional 4-tier backup architecture with quarterly tests."A maturity model in the style of the Capability Maturity Model (CMM) helps. It defines 5 maturity levels for IT resilience. Use these questions to assess where you stand, and where the most impactful next step is. Maturity evidence also matters for compliance: NIS2 (Directive (EU) 2022/2555) expects demonstrable backup management and disaster recovery, and DORA requires financial entities to test their resilience.--- [](https://www.fast-lta.de/en/blog/resilienz-reifegrad-messen-selbstbewertung-f%C3%BCr-it-leiter "IT Resilience Maturity: Self-Assessment for IT Leaders")](https://www.fast-lta.de/en/blog/resilienz-reifegrad-messen-selbstbewertung-f%C3%BCr-it-leiter "IT Resilience Maturity: Self-Assessment for IT Leaders")[Compliance](https://www.fast-lta.de/en/blog/compliance "Compliance") [###### Blog Post | 2/5/2026 What Does Non-Compliance Really Cost? Compliance costs money, time, and management attention. That is undisputed. What many decision-makers systematically underestimate: non-compliance costs significantly more. Not someday, but at the first serious incident.This article lays out the complete bill: fines, operational disruption, reputational damage, personal liability. And it shows how to use this to build a solid business case for your compliance investments.**Reading time:** approx. 10 minutes | **Updated:** April 2026--- [](https://www.fast-lta.de/en/blog/was-kostet-non-compliance-wirklich-bu%C3%9Fgelder-sch%C3%A4den-haftung "What Does Non-Compliance Really Cost?")](https://www.fast-lta.de/en/blog/was-kostet-non-compliance-wirklich-bu%C3%9Fgelder-sch%C3%A4den-haftung "What Does Non-Compliance Really Cost?")[![E42796c6c46c8138f9f700b90cbb9964 MD5 | FAST LTA](https://fast-lta.transforms.svdcdn.com/production/images/blog/e42796c6c46c8138f9f700b90cbb9964_MD5.jpg?w=960&q=80&fm=webp&fit=crop&dm=1776231152&s=7b9b019e492ba0dfd1755430f32cb915)](https://www.fast-lta.de/en/blog/schatten-ki-im-unternehmen "Shadow AI in the workplace")[AI Knowledge Management](https://www.fast-lta.de/en/blog/ai-knowledge-management "AI Knowledge Management")[Data sovereignty](https://www.fast-lta.de/en/blog/data-sovereignty "Data sovereignty") [###### Article | 5/28/2026 Shadow AI in the workplace Risks, causes and what really helps [](https://www.fast-lta.de/en/blog/schatten-ki-im-unternehmen "Shadow AI in the workplace")](https://www.fast-lta.de/en/blog/schatten-ki-im-unternehmen "Shadow AI in the workplace")