Shared responsibility
Microsoft keeps Microsoft 365 available and makes sure data is not lost if something fails in its data centers. But if a user deletes files, ransomware encrypts OneDrive, or someone deletes an entire SharePoint site by mistake, being able to restore that data is your organization's responsibility.
The recycle bin is not a backup
The recycle bin and version history help in many cases, but they keep data for a limited time and are not designed to restore large amounts of data after an attack. A dedicated backup solution stores copies outside the regular user interface and lets you roll back to a specific point in time.
What should be protected?
At a minimum: email, OneDrive, SharePoint, and Teams. For businesses with retention requirements, backup should be combined with retention and deletion policies.
What we recommend
- Find out what is actually being backed up today
- Make sure email, OneDrive, SharePoint, and Teams are backed up
- Test restores at least twice a year
- Make sure an attacker cannot delete the backup
How we can help
Wondering what this means for your organization? Let's talk.
Request a meeting →