Degraded operations are a fallback mode in which an organization keeps only essential business functions running when normal service is unavailable or unsafe to use. Instead of full performance, teams may restrict features, limit access, reroute traffic, or move to manual workflows so critical work can continue.
In cyber security, degraded operations matter because they help reduce impact during an incident. A company may intentionally switch to this mode while investigating malware, ransomware, cloud outages, or a third-party application failure. This can contain spread, protect data, and preserve continuity while responders verify what is affected. Users often notice slower service, missing features, or temporary downtime, but the goal is to keep the business functioning until systems can be safely restored.