Today's Ecosystem
What does M365 entail?
SharePoint, Microsoft Copilot, OneDrive, Exchange, Teams
General M365 - why is it relevant to secure M365?
(From Johnny's Slide Deck)
As companies move more critical data into M365, their ability to ensure around-the-clock access to that data becomes crucial to maintaining revenue generating functions. The problems they are facing are, in the event of a ransomware attack, without a third party tool the data won’t be available at all and, even if it is, recovering all of your M365 data back requires time because of the physics of data, all while these revenue generating functions are at a standstill.
F500 Airline use case
Disparate Teams have critical workflows & automation built into M365. Finance & Accounting Teams have workflow built into Exchange for invoices, expense reports, and more in a highly transactional shared mailbox. Data corruption in shared mailbox left Accounting & Finance team scrambling as all data was lost & non-recoverable.
How does Rubrik's Solution combat the pain of 'Data sprawls leads to poor visibility and control'?
Gain control and visibility of your data
Rubrik continuously and autonomously discovers and classifies all known and unknown data – both structured and unstructured – at a very rapid rate without performance disruption. Rubrik utilizes the same powerful classification engine across on-premises, cloud, and SaaS applications, thereby providing you with a single pane of glass for all of your assets and data.
What is Copilot for Microsoft 365?
Copilot for Microsoft 365 (M365) is an AI assistant used within M365 services such as Outlook, Word, Teams, SharePoint, and OneDrive
Why is M365 so important to organizations?
Increased amount of business critical data is being held in M365
What is the Rubrik difference for general M365?
we give our customers the ability to recover their M365 data from an immutable and air gapped repository and recover the data tied to those revenue generating functions first, allowing your business to continue uninterrupted while you work to recover the remaining data.
F500 Airlines impact & outcome
5 lost days of productivity troubleshooting with Microsoft support, lost invoice data may lead to double paying &/or late fees, lost expense report may lead to employees needing to submit requests, delayed reimbursements, and even double paying, not meeting compliance requirements for retention period of financial data
Outcome: used Rubrik to recover entire shared mailbox, with no data loss, and avoided any financial hardships and/or producitvity loss if data had been lost
How does Rubrik's solution combat the issue of 'Mislabeled and unlabeled sensitive files'?
Assign correct MIP sensitivity labels
Rubrik identifies sensitive files with missing or incorrect Microsoft Information Protection (MIP) sensitivity labels. Easily remediate this data security risk by applying correct labels directly from our product. Correct labeling of data is essential for ensuring compliance, reducing exposure risk, and maintaining robust security controls across your organization.
What are the main customer pain points?
Many organizations do not have the global visibility or control of sensitive data that are needed to securely roll out Copilot.
It is very difficult to discover, classify, and label all sensitive files across M365 and to ensure all access permissions are correct.
What's the biggest problem with M365 being a last line of defense?
No Data Protection
How would you pitch 'Prioritized Recovery for Exchange, SharePoint, and OneDrive'?
(From Johnny's Slide Deck)
Work around Microsoft API limits and become operational faster by prioritizing recovery of most recent Exchange items including:
- All Contacts/All Upcoming Calendar entries
- Past two weeks of calendar entries
- Emails from the last 1-30 days (user configurable)
Perform recovery of remaining items at a later time (automatic or user triggered)
Restore the most recent SharePoint and OneDrive Documents
Restore the most recent SharePoint and OneDrive Documents
Insurance company
Struggling with Copilot rollout that would drive efficiencies across it's processing, raising revenue & profit. CIO asked Copilot "how much does our average HR exec make?" and Copilot answered and spit out the W2s. So they paused Copilot deployment.
DPSM properly tagged their sensitive data in Sharpeoint, eliminated access to Copilot and the company was able to roll this out to all their knowledge workers
How does Rubrik's solution combat the issue of 'Overexposed sensitive data'?
Reduce access to sensitive files
Rubrik detects sensitive files with accidental public or organization-wide access so you can reduce access and prevent the exposure of sensitive data to unauthorized users.
What are the data security risks (vulnerabilities) of adopting Copilot?
Microsoft 365 is a difficult environment for managing data – data is generated at a fast pace and is often shared broadly.
This can lead to incorrect and over-permissive user access permissions to sites and files.
As a result, Copilot could end up sharing sensitive data with users who shouldn’t be seeing it (“unauthorized users”).
The impact of such data leaks could be significant, especially if the data is accessed by malicious insiders or external threat actors.
Data leaks could also lead to compliance violations and hefty fines.
Why is it important to secure M365?
M365 is under attack - 85% of customers have seen an email breach, 71% of customers have seen an account takeover, and 45% of all attack cases did not have immutable backup
How would you pitch a 'Sensitive Data Discovery - Risk Analysis'?
(From Johnny's Slide Deck)
Continuously monitors M365 backups discovering sensitive data such as PCI, PII, and PHI
Gain insight into how much sensitive data you have within your M365 environment and where it is located
Leverage over 65 pre-built analyzers or create your own custom analyzers using a dictionary or regex pattern
Easy setup in a few clicks - enable scanning at the subscription, workload, group, or individual user / site level
Supported for OneDrive and SharePoint
US based retailer & manufacturer - business case
M365 is the de-facto digital collaboration platform for US-based retailer & manufacturer of 2,000+ hybrid/remote employees
3-year data retention requirements for all user data in Exchange, Sharepoint, and OneDrive
There’s a need to recover data for off-boarded users, and without restoration capabilities for relic users, customer licensed additional 200 E5 licenses to attempt to meet retention requirements
How does Rubrik's solution combat the issue of 'Poor visibility of compromised data'?
Accelerate incident response
Find and recover the data you need with fast search and restore. Help expedite remediation efforts by knowing whether the assets impacted in an attack contain sensitive data.
What is the Rubrik Difference for Copilot?
Using our cyber resilience platform, Rubrik is accelerating our customers’ secure adoption of Copilot for Microsoft 365 by providing the data visibility and control they need to to help ensure that sensitive data is correctly classified, labeled, and segmented-and, ultimately, has the correct access permissions.This lets you leverage the power of Copilot without putting your data at risk of accidental exposure.
What are some statistics about the business critical data being held in M365?
148% increase in weekly meeting time for Teams users (and is still rising)
40.6B emails are being sent via M365
Weekly Teams chats per person are up 45%
Number of people working on Office docs is up 66% year over year
What is the M365 pitch?
"M365 holds critical data like emails, documents, and internal communications. Per Microsoft, attacks have surged by 200%, with 85% of organizations facing email breaches. Microsoft’s shared responsibility model doesn’t guarantee backup or recovery. Co-developed with Microsoft, Rubrik offers a cyber recovery solution that protects M365 data, includes sensitive data discovery, and ensures fast recovery and security."
US based retailer & manufacturer - outcome
Mitigated compliance & cyber risk by implementing immutable & air-gapped backup of M365 data to restore in the event of inadvertent or malicious loss of data
Eliminated wasted spend on E5 licenses (300% ROI) to keep off-boarded user data and be able to easily recover if they return to employment, or recover data to manager mailbox
Single-Source-of-Truth for recoverability of all workloads, on-premise, AWS, and M365 data
How does Rubrik's solution combat the issue of 'Slow recovery leads to material damage'?
Minimize the material damage of cyber attacks
Secure your data with air-gapped, immutable backups so you can quickly restore data in the case of encryption or deletion.
What is your Co-Pilot Pitch?
Many of the companies we are working with are struggling to securely rollout Copilot due to concerns around the AI accessing sensitive data. This is causing delays in the time to value that our customers would receive from a full Copilot deployment while they work on ensure their data is accurately tagged and eliminated from Copilot’s reach.
Using our cyber resilience platform, Rubrik is accelerating our customers’ secure adoption of Copilot for Microsoft 365 by providing the data visibility and control they need to to help ensure that sensitive data is correctly classified, labeled, and segmented-and, ultimately, has the correct access permissions.
This lets you leverage the power of Copilot without putting your data at risk of accidental exposure.