Tech Giants’ Service Outages Highlight the Importance of Business Resiliency 

November 18, 2025, marked a significant test of operational resilience in businesses worldwide. An outage of four hours in Cloudflare, one of the biggest connectivity and security providers, left many popular websites down. Some businesses were still able to serve their clients, but others were fully affected. The incident highlights one of the major lessons that organizations can learn: service provider failure is no longer a hypothetical notion, but an inevitability that must be prepared for. Therefore, having the right IT services and support partner is essential to ensure that your business remains operational despite challenges. 

IT Services and Support Provider Important Partners in Navigating Outages 

IT Services and Support Provider Important Partners in Navigating Outages

Understanding the Cloudflare Incident as Digested by an IT Services and Support Provider 

Cloudflare provides security solutions that secure websites against malicious code, bots, and other cyber-attacks. Its technology is based on active updating so that it can be effective. A configuration file was created by Cloudflare database on the day of the outage and sent to a module that manages the access of bots to the sites of customers. An accidental increase in database access permissions led to doubling the size of the file, explains an IT services and support provider. This overload led to the crash of the bot management module throughout the network of Cloudflare.  

Fortunately, Cloudflare was able to discover the issue within three hours. They also guarantee that there was no cyberattack or other malicious actions that led to the outage. Nevertheless, not all small and medium companies were quick to move out of Cloudflare services, particularly the companies that had their domain name system (DNS) controlled by Cloudflare. Other companies continued their operations with their sites and just worked without the protective services offered by Cloudflare, but this made them vulnerable to risks, according to IT services and support experts. There were thousands of users affected by the downtime, and the entire effect of the change is yet to be measured. This incident shows that one provider outage can cause an impact on many businesses and users. 

Supply Chain Risks and Interconnected Dependencies 

This incident is not unique. In the current digital environment, a few service providers are serving a large percentage of sites and online services. The impacts of the failure of one of these integrated providers run down the supply chain, namely your business. Therefore, even where internal systems are safe, companies relying on those services might suffer downtime, revenue losses, and reputational damage, explained IT services and support professionals. As such, organizations need to actively know these essential suppliers and how the dependencies flow through their supply chain. Hence, direct and indirect mapping with the help of a reliable IT services and support provider, can assist organizations in foreseeing risks and creating more powerful response plans. Practical outages, such as that of Cloudflare, are a chance to look back, revise, and enhance continuity planning. 

Key Questions for Business Continuity Planning 

In the case of service provider disruptions, there are several considerations towards business continuity and risk management. The following checklist can be used with your IT services and support partner to review the plans conducted by organizations: 

  • Business continuity plans: Does the company strategize for service provider failures? When did it last have a test or review? 
  • Backup providers: In the case that the plan involves backup providers, have they been tested? Are there enough backup options that can be maintained with contracts and budgets? 
  • Risk registers: Are the risks of service providers registered and maintained? What are the ways these risks are considered as part of the risk management system? 
  • Security procedures: Did they use existing security incident procedures during the outage? Although recent significant outages were not cyberattacks, organizations must ensure they are prepared in case of incidents with short notice. 
  • Data security: Does the company have an outage policy? Have all data been stored safely, and are temporary measures maintained? 
  • Malicious activity: Have logs been checked to understand the possibility that attackers used any security gaps created by the outage? 

Such questions, added by an IT services and support expert, prove that even a mistake of a significant provider will impact a variety of organizational areas. This includes operations, risk compliance, cybersecurity, and continuity strategy. 

Lessons for Building Resiliency 

When using provider outages, such as that of Cloudflare, several lessons can be learned: 

  1. It is a must to integrate: Business continuity, IT operations, and cybersecurity cannot work in isolation. External dependencies and internal systems should be considered in the plans. 
  1. Prepare in advance: Preparation of essential service providers and having backup solutions minimizes downtime during outages. 
  1. Testing cannot be compromised: Continuity plans must be periodically tested by exposing them to real-life situations, such as provider outages, cyber-attacks, and concurrent disasters. 
  1. Risk awareness should be up-to-date: Risk registers are to be based on the current vulnerabilities, dependencies, and mitigation strategies. 
  1. Effective communication strategies are essential: Understandable guidelines in the internal teams, customers, and stakeholders can help to minimize confusion and the loss of the image in the event of an outage. 

The Importance of Continuous Review, according to an IT Services and Support Provider 

Outages reflect the fact that the preparation is continuous. Therefore, an effective plan might not be resilient against the following disruption, as it was last year. As such, organizational entities ought to consider provider outages as a chance to find gaps in their organizations, enhance processes, and increase resilience. Even in the case of unexpected circumstances, proactive reviews may assist in ensuring continuity and security policies in order to remain effective.  

Final Takeaways 

Even short outages by service providers may reveal the gaps in operations, continuity planning, and cybersecurity strategies. In line with this, organizational resilience cannot be seen out of context with the reliability of external providers in the connected world. Likewise, dependencies need to be mapped, backups need to be established, risk registers need to be updated, and plans should be tested regularly by businesses. These measures help to convert the possible disturbances into manageable incidents instead of crises, said an IT services and support expert. 

Cloudflare incident is a good wake-up call: It is not a matter of whether an outage will happen, but when. As a result, planning, preparation, and responsive organizations will save their operations, retain consumer confidence, and ensure sensitive information. The ones that do not incur operational losses, loss of money, and reputational loss that are often far-reaching and long-lasting. 

Do you need help in ensuring your business is resilient? 

Call us today! 

Watch Our Latest Tech Videos From EB Solution

Call Now