FOMINOV CONSULTING Introduced Customers to Commvault’s Unified Cloud Data Protection Platform

16.12.2025

Against the backdrop of rapid digital transformation that is turning the region into a “hotspot” for sophisticated cyber threats, Commvault is focusing this year on Cleanroom Recovery and advanced cyber-resilience mechanisms that ensure business continuity, rapid recovery, and confident operational performance even while an attack is in progress. Commvault demonstrates its technologies in practice, such as Cloud Rewind, designed to accelerate recovery and ensure service continuity.

From Cleanroom Recovery and Air Gap Protect to AI-driven threat detection and Zero Trust policies, Commvault delivers a simple yet critically important message: in an environment of heightened digital risk, recovery speed and data integrity are just as important as incident prevention.

Cleanroom Recovery, together with Air Gap Protect, provides a fully isolated, on-demand recovery environment for secure testing and subsequent analysis. In the area of identity protection, the company offers Active Directory Recovery with forest-level recovery, which is critical for maintaining access controls. Integration with Clumio for S3 delivers scalable cyber resilience in AWS, including protection for large data lakes, applications, and databases through automated security and accelerated recovery.

All these technologies support the concept of the Minimum Viable Company (MVC)—an approach that allows organizations in our region to identify and prioritize the recovery of mission-critical IT systems to restart operations quickly. This is achieved through AI-based threat detection, immutable backups, and Zero Trust controls. Commvault also helps deliver hands-on demos, strategic sessions, and joint planning, enabling partners to strengthen their services, differentiate their offerings, and deliver greater long-term value to shared customers in an evolving threat landscape.

Cybersecurity market growth outlook for the current year

The cyber-threat landscape in our region has changed dramatically over the past year. Companies continue active digitalization, but new technologies have introduced additional risks, while traditional “Ransomware-as-a-Service” models remain relevant amid regional economic growth.

The years 2024 and 2025 were marked by a notable increase in incidents, with government and energy sectors becoming primary targets. As a result, both traditional threats and emerging technologies will remain significant attack vectors, forcing organizations to adopt multi-layered defenses and cyber-recovery strategies.

This is why data protection has become the number one priority for many business leaders in rapidly developing markets. Forty percent cited data loss as the top risk in 2025. Here, Commvault’s cloud innovations—Cleanroom Recovery, Clumio Backtrack, and Cloud Rewind—can be truly transformative, enabling not only fast data and infrastructure recovery but also regular testing of recovery plans.

Significant growth in ransomware attacks

Ransomware continues to escalate rapidly, becoming a serious threat to business continuity, critical infrastructure, and public trust. Between 2020 and 2024, average ransom payments rose from USD 700,000 to USD 8–9 million. In one example, a financial organization in the Middle East was paralyzed for 11 days, with customer access blocked and recovery stretching for weeks even after paying a multi-million-dollar ransom.

The financial sector is among the most targeted: over 21% of all cyber incidents in the UAE occur in this industry. Globally, in Q1 2025, healthcare became the most attacked sector, accounting for 26% of all cases. To counter this threat, organizations need proactive patching, immutable backups, and regular testing of cyber-recovery scenarios.

How to ensure cyber resilience and protect against extortion

True cyber resilience begins with the understanding that no system is completely invulnerable. What matters is the ability to keep critical services running during an incident and to restore them quickly afterward. This is the principle of Minimum Viability: identifying critical systems, identity services, networks, and teams required for basic business operations—and prioritizing their recovery.

In 2025, 40% of leaders in the Middle East identified data protection as the key risk, significantly higher than the global average. The global ransomware protection market, valued at nearly USD 30 billion, is expected to double by 2029, reflecting how rapidly companies and governments are strengthening their defenses.

Small businesses remain the most vulnerable: nearly 80% were affected by ransomware in 2025. Despite this, many executives still view ransom payment as a “last resort.” A Commvault study in the UK conducted in 2025 showed that while nearly everyone supports banning private ransom payments, 75% of executives would still pay to save their company. This highlights the importance of preparedness and recovery planning. Organizations that invest in cyber resilience are far less likely to face the “pay or shut down” dilemma.

How can companies remain transparent with customers without mandatory disclosure laws?

Transparency is, above all, about trust. Even in the absence of mandatory disclosure requirements, organizations that proactively engage with customers, partners, and regulators build stronger relationships—especially during crises. Cyber resilience is impossible without preparation: an incident should not be the first time IT, security, legal teams, and executive leadership work together.

According to CrowdStrike, the window before data exfiltration or destruction is just 84 minutes. This requires pre-rehearsed plans, including asset mapping, regular drills, and clear service shutdown procedures. The first step is rapid containment of the attack, followed by protection of systems included in the MVC. Next comes impact assessment, determination of data exposure, and regulatory obligations. Finally, an isolated Cleanroom environment is activated, including verification of backup integrity to restore operational activities.

At every stage, structured and timely communication is critical. In a region where 73% of executives consider customer trust the main driver of information security investment, openness is not only best practice—it is a competitive advantage.

To highlight the new level of cyber resilience, Commvault hosts its regular SHIFT events, the latest of which took place in November in New York. At these events, company experts demonstrate key capabilities of the latest solutions, share practical implementation scenarios, and discuss modern threats facing organizations worldwide. Participants can engage directly with security specialists, ask questions, and see the technology in action. A recording of the event held on November 19 is available at the link:
https://www.commvault.com/shift-virtual?mkt_tok=MDk3LVVHTC03NDkAAAGeRoJj79u8_O_B-F_sJwDGo_smOHTC1G-NwmOWy1EiRuitdaP3C4RF4Z7vxYG-wg1199rHXn8o8LJ2IkGCc2BM6-CSGp3x7an1JsyZbeWpiOIvfspP

We would also like to note that in February, a joint Commvault event will take place in Azerbaijan with the support of partners FORTIS and FOMINOV CONSULTING. Commvault will present the latest innovations in cyber protection and data recovery. Moreover, participants will be able to personally test the solution’s capabilities—experiencing a targeted attack and the real deletion of critical data across various storage systems—and then witness real-time data recovery by partner experts using different scenarios.

You can register to be among the first to learn about the solution’s capabilities and discuss current information security challenges with leading industry experts via the link:

www.fcc.az/commvault-2026

EN