Forum Discussion
Help - Office 365 Backup Policy
I'm curious why you think companies don't need backup for Office 365? Built-in tools handle things like accidentally delete emails and files, but don't handle things like:
- accidentally or maliciously purging recycled/deleted items.
- well meaning admin deleting or purging things they weren't supposed to
- malicious person gaining unauthorized access to an admin account
- massive ransomware attack that encrypts files stored in Office365
The built in tools are not built to handle these situations.
It might be a true statement to say that most companies will not experience these things, but that's also true of traditional IT and disasters. Yet will still have a DR plan, even though the vast majority of companies will never fire their DR plan in anger.
So why do you believe companies don't need to backup Office 365?
There can be a lot of discussions about this subject! There’s cloud to cloud backups which I support more than cloud to on-premises backup solution but overall office 365 contains a lot of security features to protect against abnormal usage and preventing access to people who shouldn’t have access! Keeping your admins to minimum and always use MFA
Is more than recommended! There are features of putting important document on hold! Putting data on-premises both defeats the purpose of the cloud and also puts data at more risk for breach
Agreed on the on-premises comments. (Disclaimer: I work for a cloud-to-cloud backup company. But, FWIW, I've specialized in backups for 25 years and always been a fan of cloud-based backup.)
My concern about the built-in Sharepoint backup is that restore is all or nothing, AND it's only the last 14 days. I'm also not sure what the SLA is there (RTOs RPOs). It seems very similar to the built-in Salesforce backup that Salesforce will tell you is an absolute last resort. From a backup perspective restoring your entire environment because a part of it is damaged has never been a good idea.
The Onedrive restore features handles the last 30 days. If the thing you're trying to fix is over 30 days old, you're out of luck.
- Yeah! You have to put things into perspective and think about it really! In some situations I guess that’s a good option doing a cloud to cloud backup! But most scenarios I don’t really think so! You have the 2 step recycle bin for for files, versioning for content within files and restore for the library in case of disaster or a night out coming home and doing some work! Last resort the MS backup!
Very important document could be set on hold Or set as record
Together with good security measures this will do well enough for most people
Adam"for most people" is the key phrase there. Most people don't get ransomware. (But it happens every day.) Most people don't have a hacker gain access to a privileged account. (But it happens every day.) So most people won't end up really needing something outside what MS give them.
BUT if your company DOES have one of these things happen to them, you're out of luck if you don't have a third-party backup of your O365 data.
That's why I think it's irresponsible to say that you don't third party backup of any computing service.