There is an underlying perception that once data is moved to the cloud it is protected by the cloud provider through the uptime SLAs provided. However, do note that the uptime SLAs are typically pertinent to infrastructure availability where your data lives, and not enterprise data recoverability. There are some scenarios by which you may get a best-effort option for recovery of your data which can help, but likely minimal guarantees. Data responsibility in the cloud follows a shared responsibility model. Customers are responsible for their data, and in the case of Microsoft M365, Microsoft is responsible for infrastructure availability and uptime only. Not convinced your data could be at risk when it’s located in the cloud? Consider these stats and examples from the State of Cloud Security report. 70% of companies that host data or workloads in the cloud have experienced a breach of their public cloud environment in the past year. The most common attack types were malware (34%), followed by exposed data (29%), ransomware (28%), account compromises (25%), and cryptojacking (17%). Regardless of why your data went missing or became compromised—you are responsible for making sure you can recover it.

Are Microsoft 365 native data retention options enough?

M365 has native ways to retain data, but they are not backups. They can best be described as policy based-retention options. Breaking it down to provide some examples of what this means, let’s look at SharePoint online, OneDrive, and Teams site data. By way of policy, document versions can be kept, and deleted items are retained for 93 days by default, but is this enough? Consider a security vulnerability such as ransomware where a point-in-time copy is needed. Only OneDrive natively has the option to do a point-in-time 30-day recovery specifically for ransomware if you configure it that way. This can be helpful, but consider the fact that more recent ransomware attacks will sit idle often times further back than 30 days to circumvent native retention. This means recovery of data without ransomware included isn’t guaranteed. These are just a couple examples of where it’s important to understand how far the native options will take you, and what your business will tolerate from a risk and recovery standpoint. All things considered here, I still often get asked, “Why can’t I just use these options?” The answer is that you can use these options and I recommend it, but you need to take a hard look at your business recovery SLAs before assuming that what Microsoft is offering you is enough. What you will likely find is that the native options will complement your recoverability needs, but not meet your business-level SLAs. They will also leave you managing your data from multiple locations, and when it comes to doing an actual recovery in many scenarios it can take a very long time. There also are not any options for offsite long-term retention or immutability of data. If any of these items are required, a third-party solution must be used in addition to the Microsoft 365 Native options.

What are some benefits of protecting M365 with a backup as a service option?

With M365 data already in the cloud, it’s likely that you may also choose to protect M365 data with an as a Service solution. Let’s take a closer look at why enterprises may choose an as a Service solution for any technology to get started. Pay as you go – There is no need to commit up front to large quantities of infrastructure due to the OpEx model leveraged with an as a service deployment model. No infrastructure to manage – Eliminates the need for staff to architect, design, and deploy the necessary backend infrastructure needed to run the solution in the highly available manner. This allows teams to create common workflows and reduces employee training time. Automated updates and new feature additions – On-premises deployments will typically require a significant amount of time and downtime to install security updates, and product updates to get the latest features. This step is eliminated in as a Service offerings, because the cloud provider will manage those updates. Simple to get started – Cloud as a Service offerings are generally easy to deploy through a registration process and making some up front decisions to get started. Single backup service for hybrid cloud – to not add complexity with another data silo, the backup service should not only protect M365, but other cloud workloads like AWS as well as on-prem workloads. It should provide a single UI to manage all the data no matter where it resides.

M365 Archives

Tag: M365

May 17, 2021

The practitioners guide to protecting M365 workloads with backup as a service (BaaS)

Cohesity DataProtect can protect your M365 workloads with BaaS, self-managed software and infrastructure, or combination of both —- it’s your choice.

March 22, 2021

This One Factor Determines If Your Business Will Ever Recover from a Massive IT Failure

Remote access trojans. Weak passwords. OS vulnerabilities. Sysadmin errors. Arson. Theft. Even pandemics. For your cloud-based, hyper-distributed business, the threats just keep piling up. The perils of running infrastructure at scale have never been greater, and…

March 4, 2021

Tag: M365

The practitioners guide to protecting M365 workloads with backup as a service (BaaS)

This One Factor Determines If Your Business Will Ever Recover from a Massive IT Failure

The Practitioners Guide to Microsoft 365 Teams and Groups Data Protection

The Business Email Compromise (BEC) M365 Exchange Online Reality Check

Top Moments from AWS re:Invent 2020

Anatomy of Sustaining a 90+ Net Promoter Score

What is Hybrid Cloud?

Practitioners Guide to Protecting SharePoint Online with Cohesity

The Two-Year (and Counting) Journey: Cohesity and Service Providers Innovate to build Customer-centric Technology

Practitioners Guide to Data Protection and Microsoft Technologies