Microsoft 365 Backups – Who is responsible?

Published: 11 April 2022

Launched in June 2011, Microsoft 365 (formerly Office 365) has amassed 1.2+ Billion users, with 155+ Million of these users being business users.

In today’s modern workplace, it has become a key tool for communication, collaboration, and productivity with products such as Exchange Online, OneDrive/SharePoint, Teams, and a vast amount of productivity apps.

Through using these applications, users and businesses generate and store a staggering amount of data, but who is responsible for this data? There are many misconceptions around Microsoft 365 backups, and perceptions that Microsoft are responsible, which is not really the case.

A report published by Statista shows that over 211,000 companies in the UK use Microsoft 365 and with the increase in cyber-attacks customers are being asked to confirm their data retention, backup and recovery procedures for insurance purposes, ISO standards, or as a requirement to win contracts and when it comes to data stores in their 365 tenant to common question is “Why do I need a backup for Microsoft 365, doesn’t Microsoft take care of it?”. 

Who is responsible?

Understanding Microsoft’s Shared Responsibility Model is essential for any company to ensure they can work in the cloud securely.

It is especially important to keep in mind that SaaS (Software as a Service) platforms such as Microsoft 365 do not supply a backup and recovery service. Their primary responsibility is ensuring their service runs correctly e.g., the uptime of applications and the underlying infrastructure.

According to Microsoft’s Shared Responsibility Model, it is the customer’s responsibility to manage and protect their vital business data from a compliance perspective. Microsoft’s responsibility extends up to their software and not the information or data on it.

Microsoft 365 responsibility model

What about the recycle bin?

Although there are limited, short-term data loss recovery options within Microsoft’s platform such as the recycle bin, you would be shocked to know that the average length of time to identify and contain a data breach, according to IBMs report conducted in 2021, is 287 days. A surprisingly large gap in time until you notice something is missing by which it would be too late to retrieve it from the recycling bin. You need to have complete access and control over your critical business data so that you have full data retention to cover all gaps. In that way, when disaster strikes, you have recovery options at your fingertips.

What should you consider? 

In an earlier blog, we discussed why it is essential to back up your critical data. However, when examining Microsoft 365, there are a few more reasons why you should do so. Here they are:

  • UK Data Regulatory laws and audits – You are required to be compliant with laws that regulate business data practices such as GDPR, and the Data Protection Act 2018. Specifically, GDPR requires data to be always available and this will include your 365 data.
  • Managing hybrid email deployments and migrations to Microsoft 365 – Whether you are migrating to Microsoft 365 or have a blend of on-premises Exchange and Microsoft 365 users, the exchange data should be managed and protected the same way.
  • Microsoft Teams data structure – If your business is using Microsoft Teams, you may not realise how complex it is, Teams is not a self-contained application, meaning the data generated in Teams resides in other applications, such as Exchange Online, SharePoint Online and OneDrive. With this added layer of complexity, ensuring the data is adequately protected is paramount.

Request your first 3 months FREE cloud backup storage!*

Secure your critical business data with cloud backups. Restore easily, and instantly from anywhere at anytime.

Why consider cloud backups?
  • Flexible storage options – decide what critical data you need to backup.
  • Automated backups – no manual input needed.
  • Reliable, guaranteed rapid data recovery.
  • Mitigate the risk of data loss and the cost of downtime.

*T’s & C’s apply.

Cloud data backup offer banner

About the Author

This article was published by Nicole Cowell, Senior Content Marketing Executive

Read More

Microsoft 365 Security Features, what’s included?

21 February 2024

Learn about three Security Features that are part of your Office 365 Subscription.

Microsoft Intune and Autopilot – What are the key feat...

15 February 2024

Find out about the key features of Microsoft Intune and Autopilot in our latest blog, helping Device Management and Set up.

Unleash the power of collaboration with OneDrive and SharePo...

9 February 2024

OneDrive and SharePoint are both powerful tools that can strengthen IT collaboration. Have a read of some the key benefits in our blog.

How can you unlock the full potential of your Microsoft lice...

5 February 2024

We've put together a complete checklist of how to optimise your Microsoft Licencing. Have a read to see how your business stands up.

What is an “as a service” offering? 

25 January 2024

Read more...