Preparing for the Next Worldwide Tech Outage
CIOs can take steps now to reduce risks associated with today’s IT landscape
CIOs can take steps now to reduce risks associated with today’s IT landscape
As tech leaders race to bring Windows systems back online after Friday’s software update by cybersecurity company CrowdStrike crashed around 8.5 million machines worldwide, experts share with CIO Journal their takeaways for preparing for the next major information technology outage.
IT leaders should hold vendors deeply integrated within IT systems, such as CrowdStrike , to a “very high standard” of development, release quality and assurance, said Neil MacDonald , a Gartner vice president.
“Any security vendor has a responsibility to do extensive regression testing on all versions of Windows before an update is rolled out,” he said.
That involves asking existing vendors to explain how they write software, what testing they do and whether customers may choose how quickly to roll out an update.
“Incidents like this remind all of us in the CIO community of the importance of ensuring availability, reliability and security by prioritizing guardrails such as deployment and testing procedures and practices,” said Amy Farrow, chief information officer of IT automation and security company Infoblox.
While automatically accepting software updates has become the norm—and a recommended security practice—the CrowdStrike outage is a reminder to take a pause, some CIOs said.
“We still should be doing the full testing of packages and upgrades and new features,” said Paul Davis, a field chief information security officer at software development platform maker JFrog . undefined undefined Though it’s not feasible to test every update, especially for as many as hundreds of software vendors, Davis said he makes it a priority to test software patches according to their potential severity and size.
Automation, and maybe even artificial intelligence-based IT tools, can help.
“Humans are not very good at catching errors in thousands of lines of code,” said Jack Hidary, chief executive of AI and quantum company SandboxAQ. “We need AI trained to look for the interdependence of new software updates with the existing stack of software.”
An incident rendering Windows computers unusable is similar to a natural disaster with systems knocked offline, said Gartner’s MacDonald. That’s why businesses should consider natural disaster recovery plans for maintaining the resiliency of their operations.
One way to do that is to set up a “clean room,” or an environment isolated from other systems, to use to bring critical systems back online, according to Chirag Mehta, a cybersecurity analyst at Constellation Research.
Businesses should also hold tabletop exercises to simulate risk scenarios, including IT outages and potential cyber threats, Mehta said.
Companies that back up data regularly were likely less impacted by the CrowdStrike outage, according to Victor Zyamzin, chief business officer of security company Qrator Labs. “Another suggestion for companies, and we’ve been saying that again and again for decades, is that you should have some backup procedure applied, running and regularly tested,” he said.
For any vendor with a significant impact on company operations , MacDonald said companies can review their contracts and look for clauses indicating the vendors must provide reliable and stable software.
“That’s where you may have an advantage to say, if an update causes an outage, is there a clause in the contract that would cover that?” he said.
If it doesn’t, tech leaders can aim to negotiate a discount serving as a form of compensation at renewal time, MacDonald added.
The outage also highlights the importance of insurance in providing companies with bottom-line protection against cyber risks, said Peter Halprin, a partner with law firm Haynes Boone focused on cyber insurance.
This coverage can include protection against business income losses, such as those associated with an outage, whether caused by the insured company or a service provider, Halprin said.
The CrowdStrike update affected only devices running Microsoft Windows-based systems , prompting fresh questions over whether enterprises should rely on Windows computers.
CrowdStrike runs on Windows devices through access to the kernel, the part of an operating system containing a computer’s core functions. That’s not the same for Apple ’s Mac operating system and Linux, which don’t allow the same level of access, said Mehta.
Some businesses have converted to Chromebooks , simple laptops developed by Alphabet -owned Google that run on the Chrome operating system . “Not all of them require deeper access to things,” Mehta said. “What are you doing on your laptop that actually requires Windows?”
From making unpopular decisions to learning when to listen, leaders from five businesses reveal what nobody prepared them for — and how running a company has challenged their expectations.
Technology and semiconductor shares fell sharply as investors questioned the debt financing the AI infrastructure boom and confronted higher rates and Chinese competition.
Technology and semiconductor shares fell sharply as investors questioned the debt financing the AI infrastructure boom and confronted higher rates and Chinese competition.
A sharp technology sell-off has exposed a new anxiety on global markets: whether the enormous borrowing behind the artificial-intelligence infrastructure boom can generate sufficient returns as interest rates rise and Chinese competition intensifies.
The artificial-intelligence investment boom has powered technology shares, semiconductor manufacturers and data-centre operators to extraordinary heights. Last week, investors were given a reminder that much of this expansion is being built with borrowed money.
The technology-heavy Nasdaq Composite fell 4.5 per cent over the week ended October 16, its weakest performance since late June. Semiconductor shares suffered an even deeper correction, with the Philadelphia Semiconductor Index losing about 11.4 per cent.
The selling spread quickly through global markets. Micron Technology fell 14.6 per cent over the week, while South Korea’s Samsung Electronics and SK Hynix dropped approximately 18 per cent and 24 per cent respectively.
This was more than a routine bout of profit-taking. Investors were reassessing three interconnected risks: higher interest rates, the rapidly expanding debt burden attached to AI infrastructure and the prospect of stronger competition from Chinese memory-chip manufacturers.
Artificial intelligence requires a physical infrastructure network of enormous scale. Data centres must be built, advanced processors purchased, power supplies secured and cooling systems installed before customers begin generating meaningful revenue from them.
Technology companies are increasingly supplementing their own cash with corporate bonds, syndicated loans, equipment leases, private credit and project-level financing.
JPMorgan describes the emerging funding model as a combination of conventional corporate borrowing and project finance tied to individual data-centre assets. In Australia, the Reserve Bank estimates that syndicated loans accounted for approximately three-quarters of data-centre financing during 2025 and 2026 to date.
The numbers are becoming large enough to affect broader credit markets. The Federal Reserve Bank of Dallas has cited Wall Street estimates suggesting AI-related investment-grade bond issuance could approach US$300 billion in 2026 alone.
That borrowing is not automatically problematic. Debt can be an efficient way to finance long-lived infrastructure when future revenue is sufficiently predictable. The concern is that AI technology, customer demand and computing economics are changing much faster than the repayment schedules attached to the assets.
A data centre financed today may carry debt for years. Investors must therefore make assumptions about future utilisation rates, electricity prices, chip performance, customer concentration and the amount businesses will ultimately pay for AI computing.
When interest rates rise, those assumptions become less forgiving.
September’s US inflation data intensified the pressure. Consumer prices increased 3.7 per cent over the year, ahead of market expectations and up from 3.4 per cent in August.
The hotter reading reduced confidence that interest rates would fall quickly and pushed bond yields higher. That matters particularly for companies whose valuations depend on profits expected well into the future, as well as highly leveraged infrastructure operators that may need to refinance.
CoreWeave has emerged as a closely watched test case. The specialist cloud-computing company has accumulated substantial debt and lease obligations to build AI capacity, while relying on a concentrated group of large technology customers.
Its shares fell sharply during the sell-off, while the cost of insuring its debt against default climbed. CoreWeave has argued that its contracted backlog more than covers its obligations and that financial markets do not always understand its business model. Nevertheless, its securities have become a proxy for investor confidence in debt-funded AI infrastructure.
Oracle, another major investor in AI computing capacity, fell 8.8 per cent in Friday trading, while CoreWeave dropped 15.5 per cent.
The question is shifting from how much AI infrastructure can be built to how profitably it can be operated.
Interest rates were not the only catalyst. Reports of advances by Chinese memory-chip producer ChangXin Memory Technologies raised concerns that lower-cost Chinese products could increase competition across the global semiconductor industry.
Memory chips are essential to AI systems, but the industry is historically cyclical. Periods of tight supply and high pricing can encourage rapid investment, eventually producing oversupply and falling margins.
The prospect of a well-funded Chinese competitor expanding its technological capabilities unsettled investors in Samsung, SK Hynix and Micron. It also demonstrated that AI-related demand does not insulate chipmakers from conventional competitive pressures.
That combination—slower rate cuts, more expensive financing and potentially cheaper supply—challenged the assumption that every company exposed to AI would enjoy continually expanding margins.
The sell-off does not establish that the AI boom is ending. Demand for computing power remains strong, the largest technology companies continue to generate formidable cash flows and many infrastructure projects are backed by long-term customer contracts.
What has changed is the market’s willingness to overlook the price and financing structure of that growth.
The most resilient companies are likely to be those able to fund investment from operating cash flow, secure long-duration customers and demonstrate that new capacity will earn returns comfortably above its financing costs.
More speculative operators may face greater scrutiny, particularly where debt is expensive, customers are concentrated or expected revenue depends on demand that has not yet materialised.
For Australian investors, the lesson extends beyond US technology shares. Local data-centre operators, infrastructure funds, electricity suppliers and property groups are increasingly exposed to the same investment cycle.
Artificial intelligence may remain one of the defining growth themes of the decade. But last week’s correction showed that enthusiasm for the technology does not eliminate financial discipline.
The next stage of the AI boom will be judged not only by computing power, model performance or demand for chips, but by something more traditional: whether the assets being financed can generate enough cash to repay the money borrowed to build them.
Nasdaq Composite: Down 4.5 per cent for the week ended October 16, 2026
Philadelphia Semiconductor Index: Down approximately 11.4 per cent
Micron Technology: Down approximately 14.6 per cent
Samsung Electronics: Down approximately 18 per cent
SK Hynix: Down approximately 24 per cent
US September inflation: 3.7 per cent annually
Estimated 2026 AI-related investment-grade issuance: Approximately US$300 billion
Margot Robbie and Jacob Elordi star in an adaptation of the classic novel that respects the romance’s slow burn.
From gorilla encounters in Uganda to a reimagined Okavango retreat, Abercrombie & Kent elevates its African journeys with two spectacular lodge transformations.