Veeam Software has launched a new framework designed to help CIOs and CISOs assess and improve their data resilience capabilities. The Data Resilience Maturity Model (DRMM), introduced at VeeamON 2025, provides a structured method for evaluating an organisation’s preparedness against cyber threats and IT disruptions, aiming to improve data protection and business continuity.
The new model follows research conducted by Veeam and McKinsey & Company, which identifies a significant gap between how resilient organisations believe they are and their actual readiness.
While 30% of CIOs report that they believe their organisations are above average in data resilience, fewer than 10% meet that standard in practice. The report highlights the financial risks of underestimating resilience: IT downtime is estimated to cost the Global 2000 $400 billion annually, with individual companies losing up to $200 million per outage due to disruptions and recovery costs.
“Data resilience is critical to survival—and most companies are operating in the dark,” said Veeam CEO Anand Eswaran, adding that “the new Veeam DRMM is more than just a model; it’s a wake-up call that equips leaders with the tools and insights necessary to transform wishful thinking into actionable, radical resilience, enabling them to start protecting their data with the same urgency as they protect their revenue, employees, customers and brand.”
The DRMM framework offers organisations a way to evaluate their current data resilience across three key areas: data strategy, people and processes and technology. Organisations are categorised into four maturity levels—Basic, Intermediate, Advanced and Best-in-Class—depending on their ability to recover from disruptions and minimise data loss.
Research indicates that those at higher maturity levels recover from outages seven times faster and experience significantly less downtime and data loss than organisations at lower levels.
The framework also underscores the financial benefits of investing in data resilience. According to the research, organisations can see a return of $3 to $5 for every $1 spent on resilience improvements, driven by reduced downtime and improved operational efficiency.
