InsightsOperations and lifecycle

Is your Microsoft 365 data actually backed up?

Many people assume Microsoft backs up everything. In reality, Microsoft protects the service – but you are responsible for your data.

Shared responsibility

Microsoft keeps Microsoft 365 available and makes sure data is not lost if something fails in its data centers. But if a user deletes files, ransomware encrypts OneDrive, or someone deletes an entire SharePoint site by mistake, being able to restore that data is your organization's responsibility.

The recycle bin is not a backup

The recycle bin and version history help in many cases, but they keep data for a limited time and are not designed to restore large amounts of data after an attack. A dedicated backup solution stores copies outside the regular user interface and lets you roll back to a specific point in time.

What should be protected?

At a minimum: email, OneDrive, SharePoint, and Teams. For businesses with retention requirements, backup should be combined with retention and deletion policies.

What we recommend

  • Find out what is actually being backed up today
  • Make sure email, OneDrive, SharePoint, and Teams are backed up
  • Test restores at least twice a year
  • Make sure an attacker cannot delete the backup

How we can help

Wondering what this means for your organization? Let's talk.

Request a meeting →

Read next

All articles →

Need an IT provider that understands your business?

Tell us a little about your business and what you need help with, and we'll reach out to schedule a no-obligation conversation.

Or call +47 977 99 889, or email post@iqonic.no.

post@iqonic.no