Understanding the Microsoft 365 not protected by backup risk
The detection of this risk is based on identifying known backup solutions. If you use a backup solution that is not in the allow list, the risk may still appear even though your data is protected. If you have a backup solution in place, you can accept the risk by following the procedure in Accepting risks and setting risk reminders.
The Microsoft 365 not protected by backup risk indicates that BarracudaONE has not detected backup coverage for one or more of your Microsoft 365 data sources:
Exchange Online — Email, calendar, and contacts
SharePoint Online — Team sites and content
OneDrive for Business — User files and folders
Microsoft Teams — Conversations, files, and settings
Microsoft Planner — Tasks and plans
Why this a risk
Without backup protection, your Microsoft 365 data is vulnerable to:
Accidental deletion by users or administrators
Ransomware or malicious attacks
Retention policy gaps
Account compromise
Microsoft's native retention capabilities have limitations and may not protect against all data loss scenarios. Recovering data can be difficult or impossible after the retention period expires.
Identifying this risk
To help you identify who is affected, BarracudaONE displays:
User count — Number of users whose M365 data is unprotected
Group count — Number of groups that could lose data
Resolving this risk
To resolve this risk, you can:
Activate Cloud-to-Cloud Backup — Configure a Cloud-to-Cloud Backup vault for Microsoft 365 data sources. The risk resolves automatically. For more information, see https://documentation.campus.barracuda.com/wiki/x/UoAx.
Deploy a third-party backup solution — Install and configure a recognized backup vendor for Microsoft 365. You can then click Accept risk.
Start a Cloud-to-Cloud Backup trial. To start a Cloud-to-Cloud Backup trial, follow the procedure below.
To resolve this risk
In the Risks section, do one of the following:
Select the Microsoft 365 not protected by backup risk.
Select another risk, then use the arrows to navigate to the Microsoft 365 not protected by backup risk.
Click the Fix for me button and follow the steps to resolve the risk.
If you have Cloud-to-Cloud Backup in your environment, when you click the Fix for me button, the risk goes into the Pending state for 24 hours. If you don’t have Cloud-to-Cloud Backup, and are resolving this risk by starting a trial, when you click Continue to setup, the risk goes into the Pending state for 24 hours. If you follow the steps to resolve the risk, when the risk is synced, it will go into the Resolved state. If you do not resolve the risk within 24 hours, it returns to the Unresolved state.
Once you have resolved this risk
Once you put a tool in place to back up your Microsoft 365 data sources, you can feel secure that accidental deletion, ransomware or attacks, policy gaps, and other account compromise issues can be resolved quickly, with a minimum of time and expense by your organization.