Securing Education: The Benefits of Office 365 Cloud Backup

While cloud services like Microsoft Office 365 offer numerous advantages for educational institutions, it's crucial to understand the shared responsibility model regarding data protection. Many mistakenly believe that Microsoft automatically backs up all their Microsoft 365 data. However, the responsibility of protecting their own Microsoft 365 data lies with the organizations themselves. Implementing a robust backup solution is essential to safeguard valuable educational data against loss, breaches, and ransomware attacks, especially with the increasing reliance on remote operations and digital platforms.

Understanding the Shared Responsibility Model

Microsoft provides the infrastructure and services within the cloud, but the responsibility for backing up and protecting your specific data within that environment falls on the educational institution. This means that relying solely on Microsoft's inherent cloud service may leave your data vulnerable.

Why Third-Party Backup is Crucial

To ensure comprehensive data protection, it is highly recommended to use a third-party backup provider or service. These vendors specialize in creating simple backup processes with the necessary scheduling flexibility to meet Recovery Point Objectives (RPOs) and Recovery Time Objectives (RTOs).

Fast and Granular Data Recovery

A significant advantage of using a dedicated backup vendor is the ability to perform fast and granular data recovery. These services come equipped with advanced search capabilities, enabling administrators to quickly locate specific items to meet legal and compliance requirements. This level of precision is invaluable when dealing with sensitive student or institutional data.

Backing Up Microsoft Teams: A Comprehensive Approach

Microsoft Teams is not a self-contained application. It's an abstraction layer that integrates data from various other Microsoft 365 applications, including Exchange Online, SharePoint Online, and OneDrive for Business. A comprehensive Teams backup strategy must include backing up data from these underlying sources.

Configuration Backup

It's equally important to back up Teams configurations, including settings, members, and team structure. Losing these configurations can disrupt collaboration and require significant administrative effort to rebuild.

Addressing Data Retention and Loss

Retention policies for deleted Office 365 data can vary by application. When an employee or student leaves the institution and their Microsoft account is removed, data loss can occur if proper retention policies are not in place. Human error during retention policy configuration is a common cause of data loss.

Protecting All User Data

All users within an educational institution generate data daily, and most, if not all, of that Microsoft 365 data holds value. Failing to protect all organizational data can lead to significant losses and disruptions. It would be a mistake to not protect all your organization’s data.

Licensing Considerations for Backup Solutions

When selecting a backup solution like Veeam Data Cloud for Microsoft 365 or Veeam Backup for Microsoft 365, licensing is determined by the number of users within the Microsoft 365 subscription.

SharePoint Licensing

Each SharePoint user inside your Microsoft 365 subscription (or on-premises deployment) that has been granted access to the SharePoint sites you are looking to protect needs to be licensed to back up and protect your organization’s SharePoint environment. In a hybrid SharePoint deployment (SharePoint On-Premises and SharePoint Online) where the same user has access to both, only one Veeam license is needed for that user. External SharePoint users do not require licensing.

Read also: Enhancing Education in Lake County

Leveraging Microsoft 365 Backup Storage with Veeam

Microsoft has partnered with select backup vendors like Veeam to integrate its backup solution, Microsoft 365 Backup Storage. This partnership allows customers to combine the speed and scale of Microsoft 365 Backup storage with the flexibility and control offered by Veeam.

Veeam Data Cloud for Microsoft 365: A Managed Backup Solution

Veeam Data Cloud for Microsoft 365 is a Veeam-managed backup service designed to protect Microsoft Exchange, SharePoint, OneDrive for Business, and Teams data. Veeam manages the backup infrastructure, storing all data in an Azure region of your choice. Users retain full control over creating backups and completing restores.

Immutability and Data Security

Once data is backed up using Veeam Data Cloud, it cannot be altered, tampered with, or deleted by users, including administrators or attackers. This immutability ensures data integrity and protection against ransomware.

Azure Storage and Data Residency

Veeam Data Cloud utilizes Azure Storage to safeguard critical Microsoft 365 backup data. The choice of Azure region allows organizations to meet data residency, regulatory compliance requirements, and performance optimization needs.

Locally Redundant Storage (LRS)

Veeam Data Cloud provides locally redundant storage (LRS), which replicates data three times within a single data center in the primary region. This ensures high availability and prevents data loss due to hardware failures.

Veeam Licensing for Education

Veeam offers special licensing for the education sector, providing competitive pricing and benefits for faculty and students.

Competitive Pricing

For the education sector, Veeam offers highly competitive pricing of six free students for every paid faculty user, with a starting MSRP of $3.50 per user per month, and a minimum of 10 faculty users per order.

Veeam Data Cloud Flex Package

With Veeam Data Cloud Flex package (and available within the Premium package), there is no data lock-in. After a subscription is cancelled or terminated, your backups will still be retained for an additional 30 days.

Choosing the Right Veeam Data Cloud Package

Veeam Data Cloud offers different packages to suit varying needs and risk tolerances.

Premium Package

For the strongest data protection capabilities, the Premium package provides the best mix of flexibility and control over backups and restores, combined with speed and scale. It is recommended to use Premium to protect your “top users”, e.g. Managers and above, finance, operations, HQ employees.

Flex vs. Express

If you decide not to protect all your users with Premium, you can choose between Flex and Express for your remaining users, depending on your risk tolerance. If you value granular restores and customizable backup capabilities to meet low RPOs, you will find Flex to be the right solution. If your priority is fast backup times and ransomware protection, then you will find Express to be a better solution.

Fair Use Policy

Veeam provides a Fair Use Policy designed to ensure fair and reasonable use of the Services by Veeam under the Veeam Data Cloud Service Agreement.

Barracuda's Free Backup Service for Students

Barracuda, in partnership with OX IT Solutions, offers free backup services for students using Office 365, providing an incredible benefit to educational institutions.

Comprehensive Cybersecurity Solutions

Barracuda offers comprehensive solutions designed to protect Microsoft 365 data, ensuring that educational institutions are shielded from potential cyber threats.

Data Protection and Compliance

Ensuring data security and compliance is paramount for educational institutions. Barracuda’s features help institutions meet compliance requirements and protect sensitive information.

Network and Application Security

Protecting web applications and APIs is critical. Barracuda’s Web Application Firewall and WAF-as-a-Service offer robust protection. Additionally, network security is enhanced with Secure SD-WAN, Zero Trust Access, and Next-Generation Firewalls, ensuring a secure digital environment for students and staff.

Ransomware and Incident Response

Ransomware attacks can be devastating. Barracuda’s comprehensive protection strategies and quick incident response capabilities build a resilient defense against ransomware. These solutions help detect, respond to, and recover from attacks efficiently, minimising disruption to educational activities.

Managed Services

Barracuda Managed XDR offers continuous monitoring and expert management, allowing educational institutions to rapidly mature their cybersecurity posture. This comprehensive cybersecurity-as-a-service offering provides peace of mind with round-the-clock protection and management.

Cloud-Based Data Protection for Office 365

Granular backup and recovery for Exchange, OneDrive, SharePoint, and Teams are crucial for educational institutions. This ensures that all important information is always available when needed, providing long-term security and accessibility.

Flexible Restore Options

Barracuda offers flexible restore options, allowing institutions to restore data back to the original location, an alternative location, or download the data locally. This flexibility ensures that data recovery is tailored to the institution's specific needs.

Partnering with Barracuda and OX IT Solutions

By partnering with Barracuda and OX IT Solutions, educational institutions gain access to powerful, easy-to-manage protection suites tailored to their unique needs. This partnership ensures comprehensive cybersecurity and data protection, allowing institutions to focus on their primary mission: educating students.

Microsoft Office 365 Education Plans: Features and Capabilities

Microsoft Office 365 offers various plans tailored to meet the specific needs of educational organizations. Understanding the features included in each plan (A1, A3, and A5) is crucial for selecting the right solution. Each Office 365 education plan includes many individual services, such as Exchange Online and SharePoint Online.

Platform Features Across Office 365 Education Plans

The following table lists all platform features that are available across Office 365 education plans. Cloud identity, Federated identity, or multifactor authentication, Office 365 desktop setup, Bulk upload using .csv files, Directory Sync tool, Exchange simple (cutover) migration, delete accounts and reset user passwords from Office 365 or by using Windows PowerShell2.

Microsoft Purview Compliance Portal

The Microsoft Purview compliance portal is designed to help you manage compliance features across Office 365 for your organization. Links to existing SharePoint and Exchange compliance features bring together compliance capabilities across Office 365. Currently, many of the compliance features are still accessible through service-specific management interfaces, such as the Exchange admin center (EAC).

Data Governance and Advanced Data Governance

Data governance lets users create, publish, and manually apply labels to documents; import data using drive shipping or over the network; and create and apply retention/deletion policies across workloads, users, and groups. Advanced data governance allows you to retain important information and delete unimportant information by classifying information based on a retention or deletion policy or both. It includes intelligent/automated actions such as recommending policies; automatically applying labels to data; applying labels based on sensitive data types or queries; and use of smart import filters. It also includes the Supervision feature for reviewing employee communications for security and compliance purposes.

Security and Compliance Features

Microsoft 365 offers a range of security and compliance features to protect sensitive data.

Collaboration and Communication Tools

Microsoft 365 provides various collaboration and communication tools, including Skype for Business and Microsoft Teams.

Office Applications and Web Versions

Microsoft 365 Apps for enterprise is a monthly subscription offer of the latest Office desktop suite. Office for the web versions are included. The following table provides links to comparisons of Office for the web feature capabilities available in Office 365 education plans to feature-rich Microsoft Office desktop apps. Use the comparisons to discover what features are available in Office for the web. Then, select the feature name to read a brief description about how that feature works. A limited selection of Office features has been chosen to represent the advanced capabilities of the Office desktop suite. The tables aren't a comprehensive list of Microsoft Office features.

Exchange Online Limits

Understanding the limits applied to Exchange Online is essential for managing email and collaboration effectively. These limits include address list limits, archiving capabilities, and message size limits.

Message Size Limits

Message size limits are necessary to prevent large messages from blocking delivery of other messages and affecting service performance for all users. These limits include attachments, and apply organization-wide to all messages (inbound, outbound, and internal). Messages larger than this limit aren't delivered, and the sender receives a non-delivery report (NDR). While message size limits can be configured up, down, or on a per-user basis, administrators can also create transport rules to limit the maximum size of any individual attachment. Even if the total size of all the file attachments doesn't violate the message size limit, there's still a limit on how many attachments are allowed in the message. This limit is the maximum file size of a single attachment. Individual client programs, including Outlook on the web, may limit the size of attachments under this maximum. Exchange ActiveSync doesn't implement attachment size limits on an individual attachment basis.

Receiving and Sending Limits

Receiving limits apply to the number of messages that a user, group, or public folder can receive per hour. This limit applies for both messages received from the Internet and from on-premises servers. For distribution groups stored in an organization's address book, the group is counted as one recipient. Message rate limits determine how many messages a user can send from their Exchange Online account within a specified period of time. This limit helps prevent overconsumption of system resources by a single sender.

Distribution Group Limits

Distribution groups that contain the number of members specified by this limit must have delivery management or message approval options configured. Delivery management specifies a list of senders who are allowed to send messages to the distribution group. If you're using Microsoft Entra DirSync, the maximum number of distribution group members that you can synchronize from your on-premises Active Directory to Microsoft Entra ID is 15,000. If you're using Microsoft Entra Connect, that number is 50,000.

Transport and Inbox Rule Limits

The following list includes limits that apply to journal rules, transport rules (also known as organization-wide rules), and limits that apply to Inbox rules. Maximum size of an individual transport rule - The maximum number of characters that can be used in a single transport rule. Character limit for all regular expressions used in all transport rules - The total number of characters used by all the regular expressions in all the transport rule conditions and exceptions in the organization. Scanning limits for attachment content - The transport rule conditions let you examine the content of message attachments, but only the first 1 MB of the text extracted from an attachment is inspected. This 1 MB limit refers to the text extracted from the attachment, not to the file size of the attachment.

Metallic Office 365 Backup for Education

Metallic offers a specialized Office 365 Backup solution tailored for educational institutions, addressing their unique challenges and requirements.

Addressing the Challenges of Educational Institutions

Educational institutions are being stretched to do more with less, facing increasing risks from data loss, breaches, and ransomware due to the shift to remote operations, an increased reliance on data, and the need to trim costs. Schools do not necessarily have a blueprint for how to easily protect their data in a secure, scalable way, especially within applications like Microsoft 365.

Licensing Model Aligned with Microsoft 365

Educational institutions manage and protect vast amounts of data. They can now purchase Metallic Office 365 Backup in a licensing model that aligns with the purchasing process of Microsoft 365. For each faculty license purchased, educational organizations will receive four student licenses free of charge.

Quick and Scalable Deployment

Coupling Azure cloud storage with Metallic’s BaaS protection for Microsoft 365 enables IT pros in academia to quickly start protecting faculty and students’ devices without physical interaction or downtime. The Metallic solution, paired with Azure, can be up and running in minutes, and it provides sophisticated, secure, enterprise-grade technology that can quickly scale - without impacting students, teachers, or administrators.

Comprehensive Coverage

It delivers coverage across Microsoft Exchange, OneDrive, SharePoint, Project, and Teams to help ensure that valuable Microsoft 365 data is protected and recoverable from deletion or attack.

Silent Installs and Backups

The Metallic solution’s silent installs and backups normally require no action from end users.

Compliance with FERPA

With federal laws like the Family Educational Rights and Privacy Act (FERPA) that protect the privacy of student educational records, it’s more important than ever that data is securely protected, especially as cloud technology becomes integral to the learning process in this new normal.

Global Availability

Metallic’s new education license is available in more than 23 countries globally and wherever Metallic can be purchased.

tags: #office #365 #cloud #backup #for #education