Practical Resilience: A Guide to the Current Moment

Given everything unfolding in the Middle East right now, I wanted to share some practical thinking about resilience and preparedness. This isn't about panic — it's about doing what we do best as engineers: identifying risks, assessing probabilities, and building in redundancy before you need it. Think of it as incident response planning for real life.

What's Actually Happening#

The US and Israel launched a major joint military operation against Iran on February 28. Iran's Supreme Leader was killed. Iran has retaliated with missile strikes across the Gulf region and effectively shut down shipping through the Strait of Hormuz — the chokepoint through which roughly 20% of the world's oil supply flows. Tanker traffic has halted. Oil prices are spiking. The conflict's duration is uncertain, with estimates ranging from weeks to months.

This has real implications for all of us, even thousands of miles from the conflict zone, across three main vectors: economic disruption, cyber threats, and the possibility of domestic security incidents.

Cyber Threats — This One Is in Our Lane#

Multiple intelligence firms and government agencies are reporting that Iranian-linked cyber groups have already escalated reconnaissance and DDoS activity against US targets. CISA, CrowdStrike, and Google Threat Intelligence have all issued warnings. The targets of concern include critical infrastructure, financial systems, healthcare, energy, and telecommunications.

Here's the uncomfortable part: CISA is currently operating at roughly 38% staffing due to a funding lapse. The national cyber defense posture is degraded at the worst possible time.

What you should do professionally:

• Audit your attack surface. Review any internet-facing services you manage. Check for default credentials, unpatched edge devices, and unnecessary exposure. If something doesn't need to be public-facing, pull it behind a VPN.

• Patch aggressively. Iranian threat actors have historically exploited known vulnerabilities in edge devices and industrial control systems. Don't defer updates right now.

• Watch for phishing escalation. Expect an uptick in spearphishing campaigns that exploit the news cycle — fake alerts, fake donation links, fake "urgent security update" messages. Remind less technical colleagues.

• Back up everything offline. Ransomware is explicitly in the threat model. Ensure you have air-gapped or offline backups of anything critical — code repos, configs, databases, credentials.

• Enable MFA everywhere you haven't already. Review who has access to what. Principle of least privilege matters more than usual.

• If you manage any OT/ICS/IoT systems (home automation, solar controllers, industrial equipment), isolate them from the internet where possible. These are specifically called out as targets.

What you should do personally:

• Change passwords on critical accounts (banking, email, cloud storage) if you haven't recently. Use a password manager.

• Verify MFA is enabled on financial accounts.

• Be skeptical of any unexpected communications referencing the conflict — phishing campaigns spin up fast around major news events.

• Consider having a backup way to access financial accounts if your primary device or network is compromised.

Economic Impacts — The Slow-Moving Wave#

Even if the conflict resolves quickly, the economic ripple effects will take time to work through:

• Energy prices are rising. Oil has spiked 8–12% already and could go much higher if the Strait stays closed. This flows into gasoline, heating costs, and electricity.

• Inflation will follow. Energy costs are embedded in everything — food production, shipping, manufacturing, data center operations. Expect price increases over the coming weeks and months regardless of how the conflict resolves.

• Supply chains will tighten. Anything that ships through or near the Persian Gulf faces delays and cost increases. This includes electronics components, petrochemicals, and LNG.

Practical steps:

• Stock your pantry. Not doomsday hoarding — just a sensible buffer of non-perishable food, household essentials, and any regular medications. Buy now before price increases fully propagate. Think two to four weeks of comfortable self-sufficiency.

• Top off fuel. Fill your vehicles. If you use propane, heating oil, or other fuel, consider topping off tanks now.

• Hold some cash. If banking systems experience even temporary disruption from cyber attacks, physical cash matters. A few hundred dollars in small bills is simple insurance. (Too bad Lightning isn't widely adopted already)

• Review your financial exposure. Not investment advice, but understand how your savings and investments might be affected by energy price spikes, inflation, and market volatility. At minimum, understand your risk.

Physical Security — Low Probability, Worth Awareness#

DHS has assessed that a large-scale physical attack on US soil is unlikely, but has warned about the potential for lone-wolf incidents and targeted attacks against perceived government, military, Jewish, or pro-Israel targets. An incident in Austin, Texas is already under FBI investigation for possible connection to events overseas.

For most of us, this mostly means:

• Maintain situational awareness in public spaces, especially in urban areas and near high-profile targets.

• Don't contribute to panic or hate. Our Iranian-American colleagues, neighbors, and friends are not the enemy. Community cohesion is a security asset.

Communications Resilience#

If network infrastructure is degraded — whether from cyber attacks, grid issues, or other disruption:

• Have a battery-powered AM/FM radio for news. This sounds quaint until the internet is down.

• Know how to reach your immediate family and close contacts without relying on internet-based messaging. Have phone numbers written down somewhere physical.

• Keep devices charged. Keep a power bank or two topped off.

• If you work remotely, think about your fallback plan for connectivity. Mobile hotspot? Library? A friend with a different ISP? Know your options before you need them.

The Engineer's Mindset#

None of this is about predicting catastrophe. It's about what we already know how to do — build systems that degrade gracefully, maintain backups, plan for failure modes, and reduce single points of failure. Apply that same thinking to your personal infrastructure.

The most likely outcome is that this conflict is resolved in weeks, oil prices moderate, and most of these precautions turn out to be unnecessary. That's fine. Preparedness that you never need is not wasted — it's the definition of good engineering.

Stay safe, stay sharp, and look out for each other.