For organisations preparing for ransomware, cyber attacks and major IT outages, an out-of-band communications platform should provide a trusted alternative when normal communications systems are unavailable or cannot be trusted.
This is particularly important as modern cyber attacks can affect more than servers and endpoints. An incident may disrupt Microsoft 365, corporate email, collaboration platforms, networks and identity systems at the same time.
The NCSC's guidance for organisations responding to cyber attacks recommends establishing controlled communications channels and recognises that internal systems may be unavailable or untrustworthy during a serious incident.
This means enterprise security and business continuity teams should assess an OOB platform based not only on its features, but on whether its architecture allows those features to remain available during the failure scenario they are intended to address.
An out-of-band crisis communication platform is a communications system designed to operate independently of an organisation's normal IT and communications infrastructure.
It provides an alternative way for authorised people to communicate, coordinate, distribute information and manage a crisis when primary systems such as email, Microsoft Teams, corporate networks or identity services are unavailable or compromised.
The important distinction is between remote access and genuine out-of-band capability.
A cloud application that can be accessed from outside the corporate network is not necessarily an OOB platform if it still depends on the same corporate identity provider, email infrastructure or other systems affected by the incident.
A genuinely resilient OOB platform should minimise dependencies on the systems that may fail.
The key features enterprise organisations should assess are:
These criteria provide a more useful assessment framework than simply comparing feature lists between vendors.
Why is independence important in an OOB communications platform?
Because the systems used for everyday communications may be the same systems affected by a cyber attack or major IT outage.
During ransomware, for example, an organisation may lose access to its corporate network, email, Microsoft 365 applications or identity infrastructure.
An OOB platform should therefore be capable of operating outside those dependencies.
Enterprise teams should assess whether the platform provides:
The critical question is:
If our corporate network, Microsoft 365 environment and primary identity provider were unavailable, could our crisis team still communicate?
If not, the organisation may have an OOB communications gap.
No. Cloud hosting alone does not make a communications platform genuinely out-of-band.
An application can be cloud hosted while still depending on corporate identity, email, networking or other services that may be unavailable during an incident.
When assessing a platform, organisations should map its dependencies rather than simply asking where the application is hosted.
What security features should an OOB communications platform have?
An OOB platform should have strong security controls because it may contain sensitive information about employees, incidents, operations and crisis response.
Enterprise teams should assess:
Architecture is equally important.
Organisations should understand whether customer environments and data are isolated and how privileged access is controlled.
The objective is not simply to find a platform that is secure during normal operations.
The question is whether its security model remains appropriate during the cyber incidents it is designed to help manage.
How resilient should an out-of-band communications platform be?
An OOB platform should be assessed as part of the organisation's operational resilience architecture.
Look at:
Do not rely solely on a headline uptime percentage.
Ask the provider what happens if a critical infrastructure component, hosting region, network service or supporting dependency becomes unavailable.
The important question is:
Can the platform continue operating during the types of failures it is intended to protect the organisation from?
What notification channels should an OOB crisis communication platform support?
A robust platform should provide multiple ways to reach people because not every employee or stakeholder will have access to the same technology during an incident.
Depending on organisational requirements, useful channels include:
Two-way communication is particularly valuable.
Sending an alert does not necessarily mean that the intended recipient has received, understood or acted upon it.
A mature emergency notification capability should therefore provide visibility of delivery and responses.
Two-way communication allows response teams to establish whether people have received and acknowledged important instructions.
It can also provide situational information from people in the field, support escalation and help crisis managers identify where further intervention is required.
Should an OOB platform provide collaboration as well as mass notification?
For many enterprises, yes.
Mass notification helps organisations broadcast information, but crisis management also requires ongoing collaboration between executives, security teams, business continuity teams, IT, communications and operational teams.
An OOB platform may therefore need to provide:
This provides an alternative environment for managing the incident when normal collaboration platforms are unavailable or cannot be trusted.
The goal is not necessarily to replace Microsoft Teams or Slack during normal operations.
It is to ensure that the organisation has somewhere trusted to coordinate when those platforms are compromised or unavailable.
Why should an OOB platform provide access to critical documents?
Because a cyber attack can make the organisation's normal document repositories inaccessible.
Crisis teams may need immediate access to:
If those documents exist only within the organisation's normal cloud environment, they may be unavailable when they are most needed.
An OOB platform should therefore provide an independent mechanism for storing and distributing critical information.
Depending on requirements, assess whether information can be:
The objective is not simply document storage.
It is ensuring that critical information remains available when primary IT systems do not.
Can users still authenticate if the organisation's identity provider is compromised?
This is one of the most important questions enterprise security teams should ask.
Identity infrastructure can become a critical dependency during a cyber attack.
If an OOB platform relies entirely on the same identity system that has been compromised, its independence may be significantly reduced.
Teams should therefore assess:
This does not mean that enterprise SSO should automatically be rejected.
SSO can simplify administration and improve security during normal operations.
The important consideration is whether it becomes a single point of failure during the incident for which the OOB platform exists.
What should an OOB communications platform record?
Crisis communications can form an important part of an organisation's incident record.
An OOB platform should therefore provide appropriate auditability around activities such as:
A good audit trail can support post-incident investigation, lessons learned, governance and regulatory reporting.
It can help answer fundamental questions such as:
Who communicated what, when, to whom and with what response?
For enterprise organisations, that evidential record can be as important as the communication itself.
Should an OOB platform integrate with existing enterprise systems?
Yes, where integrations improve usability and automation without undermining independence.
Through an API, potential integrations can include:
However, each integration should be assessed for resilience.
Ask: What happens if this integrated system is unavailable?
An integration should ideally improve normal-day operations without becoming a prerequisite for the platform to function during a major incident.
This is an important distinction between integration and dependency.
How should an organisation test its OOB communications platform?
An OOB platform should be tested as part of the wider business continuity, cyber resilience and crisis management programme.
Testing should establish whether people can actually communicate when normal systems are unavailable.
Consider testing:
The organisation should also test its people and processes.
Users need to know that the platform exists. Crisis teams need to know how to activate it. Administrators need to know how to manage it under pressure.
A platform that has never been tested during an outage is an assumption, not a proven resilience capability.
When evaluating platforms, security and business continuity teams should ask:
These questions help organisations assess the platform's actual resilience rather than comparing feature lists in isolation.
There is no single feature that makes a platform resilient.
However, genuine independence from the organisation's primary IT and identity infrastructure is arguably the most important architectural characteristic.
If the platform depends on the same systems that are unavailable or compromised during an incident, other features may not be accessible when they are needed.
The most effective OOB architecture therefore combines independence with security, resilience, communication, collaboration, information access and operational readiness.
The best way to assess an OOB platform is to test it against realistic failure scenarios.
Consider a ransomware incident where:
Then ask, can the organisation still:
If the answer to any of these is unclear, the organisation should investigate the dependency and address it before the next incident.
It is also important to distinguish an out-of-band communications platform from a traditional emergency notification system.
Emergency notification primarily focuses on rapidly distributing alerts to a defined audience.
An OOB crisis communications platform can provide a broader capability, potentially encompassing:
The right solution depends on the organisation's risk profile and requirements.
For an enterprise preparing for ransomware or major IT outages, however, notification alone may not be sufficient.
The organisation may need a complete communications environment that can operate outside its normal IT ecosystem.
YUDU Sentinel provides an independent communications layer designed to help organisations communicate and coordinate when normal IT systems are unavailable or compromised.
The platform combines capabilities including Sentinel Spaces, mass notification, secure crisis collaboration, secure video conferencing, Chat Channels, PiNG, Hotline and critical document distribution.
This enables organisations to establish a dedicated environment for crisis communications rather than relying solely on their everyday collaboration and communications infrastructure.
Sentinel can support communication before, during and after a major incident, helping organisations establish an out-of-band capability as part of their wider business continuity and cyber resilience strategy.
The purpose of an out-of-band communications platform is not to provide another way of doing business as usual.
It is to provide a trusted alternative when business as usual is no longer possible.
For enterprise security and business continuity teams, the most important assessment criteria are therefore broader than a conventional feature checklist.
The platform should be:
Ultimately, the question for any enterprise is straightforward:
When your network goes down, your identity systems are compromised and your normal communications cannot be trusted, how will your organisation continue to communicate?
That is the question an effective out-of-band communications strategy needs to answer.