Truth in IT
    • Sign In
    • Register
        • Videos
        • Channels
        • Pages
        • Galleries
        • News
        • Events
        • All
Truth in IT Truth in IT
  • Data Management ▼
    • Converged Infrastructure
    • DevOps
    • Networking
    • Storage
    • Virtualization
  • Cybersecurity ▼
    • Application Security
    • Backup & Recovery
    • Data Security
    • Identity & Access Management (IAM)
    • Zero Trust
    • Compliance & GRC
    • Endpoint Security
  • Cloud ▼
    • Hybrid Cloud
    • Private Cloud
    • Public Cloud
  • Webinar Library
  • TiPs
  • DRAW

Rubrik: Protecting Microsoft 365 Data from Cyber Attacks

Rubrik
10/08/2026
0 (0%)
Share
  • Comments
  • Download
  • Transcript
Report Like Favorite
  • Share/Embed
  • Email
Link
Embed

Transcript


Senior Director of Product Management. Malika, thanks for having me again. Today, let's move to safeguarding your M365 data from cyber attacks. Why is backing up your M365 environment so important? Thanks Nawaz, and I'm thrilled to be here again to talk about a different topic and the criticality of protecting your M365 data. So in our last session, we talked about identity being your keys to your kingdom, and we're seeing an increase in identity-based attacks. But when we talk about, hey, once an attacker has the keys to your kingdom and they come in, what are they targeting? They are targeting your crown jewels, which is your data. And your most critical crown jewel is your M365 data. So we're seeing an increase in M365 attacks where attackers not only come in, they delete, they exfiltrate your M365 environments. And having your M365 data back up and running becomes key because I always think about your Microsoft 365 environment as your command and control center. So if anything were to happen, you need your emails, you need your teams running properly so you can effectively orchestrate across different departments to get your business back up and running as fast as possible. So that is why it is critical to think about resiliency for your M365 environment. What is the biggest misconceptions organizations have about protecting their M365? Yeah. Candidly, the biggest misconception I hear about this is that, hey, Microsoft already does this for us. But the devil here is in the detail. What Microsoft guarantees is around infrastructure. It is around uptime. They are not guaranteeing you your data. It is up to you as the customer to protect your data. And so that is the biggest misconception I hear, which is customers are already thinking they've invested a lot in their E3, E5 licenses, so Microsoft has it. This is really an additional area that customers really need to think about investing in to safeguard that critical environment. That to me is the biggest one. And then secondarily, once people think about protecting M365 data, they always look at native tools. Hey, I have Recycle Bin. Hey, Microsoft provides some legal hold. Again, none of those are meant for recovery. When we think about an M365 attack, it is deleting the full tenants. It's wiping out a lot of data. All of those tools allow you to recover one or two files, one or two data sets. But it is not thinking about a mass recovery objective, which is what happens in the event of cyber. So what does recovery actually need to include? Yeah, a lot of the concepts that I talked about before, which is about recovering clean and making sure you're recovering back clean, still holds with M365. But M365 actually has a particular nuance to it, which ties to this whole concept around your minimally viable business. When you're thinking about recovering your M365 environment, most customers' M365 environment is huge. Think about your own inbox, right? I have like five years worth of emails. I have God even knows how many teams chat files and folders, which are so old and outdated. So recovering all of that takes a while. Microsoft has API limitations. So there's a lot of guardrails around the recovery and the timeline around recovery. So this is where we go back to what are customers' business goals and how do we make sure that when we're thinking about recovery, we're prioritizing the users who matter first, the data that matters first. And that is what Rubrik does. We don't think about recovery as this random recovery, which takes so long. It is aligned to your business objective about recovering your most critical users and their most critical data. So Rubrik's M365 recovery and resiliency solution is really focused around this. It's around recovering your minimally viable business so your business can get back up and running as fast as possible and enabling you to do that. So in regards to MSPs, what opportunity does M365 data protection create? Yeah, there's a huge opportunity here when we think about the M365 market in general. As I said, most M365 customers today have this misconception that they're covered with Microsoft. So there's a lot of awareness and education that we need to do around educating customers around the need for resiliency. And once MSPs are able to do that by talking to customers about their strategies around Microsoft 365, and it creates here a lot of opportunities for us to create awareness, create the need for protection, and really drive this. And then I'm going to speak a little bit about the sales economic side of it. Our M365 product is one of our fastest growing products, but it is also one of our shortest sales cycle products. So these are fast products that we're able to land with customers. And that sales motion is something which we see high alignment with MSPs. So I'm excited for this team here to take this on and really accelerate with it. Malika, thank you. Thank you for having me. Until next time. Thank you so much.

TL;DR

  • Microsoft's E3/E5 licenses cover infrastructure uptime, not customer data — organizations must independently protect their M365 environments against deletion and exfiltration.
  • Native M365 tools like Recycle Bin and Legal Hold are designed for single-file recovery, not the mass-deletion scenarios that occur during a real cyberattack.
  • Rubrik prioritizes minimally viable business recovery by restoring the most critical users and data first, working within Microsoft's API limitations to accelerate return to operations.
  • M365 data protection is one of Rubrik's fastest-growing products with the shortest sales cycles, representing a high-alignment opportunity for MSP partners to drive new revenue.

Summary

In this episode of MSP Unscripted, Rubrik's Nawaz Ali speaks with Mallika Swaminathan, Senior Director of Product Management, about the growing threat to Microsoft 365 environments and why dedicated backup and recovery is essential. Mallika opens by framing M365 as an organization's command-and-control center — the hub of email, Teams, and collaboration that must be operational for any incident response to succeed. She identifies the most pervasive misconception in the market: that Microsoft's E3 and E5 licensing already covers data protection. In reality, Microsoft guarantees infrastructure uptime, not customer data integrity, leaving organizations exposed. Native tools like Recycle Bin and Legal Hold are designed for individual file recovery, not the mass-deletion scenarios that characterize real cyberattacks. Rubrik's approach centers on minimally viable business recovery — prioritizing the most critical users and their most important data first, rather than attempting a slow, undifferentiated full-tenant restore subject to Microsoft API rate limits. Mallika closes by highlighting the commercial opportunity for MSPs: M365 protection is one of Rubrik's fastest-growing products with one of its shortest sales cycles, making it a natural fit for MSP-led customer conversations around resilience and awareness.

Chapters

0:00 - Introduction & Topic Overview
0:24 - Why M365 Backup Matters
1:26 - Common Misconceptions About M365 Protection
2:35 - What True M365 Recovery Requires
4:05 - MSP Opportunity in M365 Protection

Key Quotes

1:05 "I always think about your Microsoft 365 environment as your command and control center. So if anything were to happen, you need your emails, you need your teams running properly so you can effectively orchestrate across different departments to get your business back up and running as fast as possible."
1:43 "What Microsoft guarantees is around infrastructure. It is around uptime. They are not guaranteeing you your data. It is up to you as the customer to protect your data."
2:19 "When we think about an M365 attack, it is deleting the full tenants. It's wiping out a lot of data. All of those tools allow you to recover one or two files, one or two data sets. But it is not thinking about a mass recovery objective, which is what happens in the event of cyber."
3:30 "We're prioritizing the users who matter first, the data that matters first. And that is what Rubrik does. We don't think about recovery as this random recovery, which takes so long. It is aligned to your business objective about recovering your most critical users and their most critical data."
4:40 "Our M365 product is one of our fastest growing products, but it is also one of our shortest sales cycle products. So these are fast products that we're able to land with customers."

FAQ

Doesn't Microsoft already protect my M365 data through my E3 or E5 license?

No. Microsoft's guarantees cover infrastructure availability and uptime, not your actual data. If data is deleted or exfiltrated in a cyberattack, recovering it is the customer's responsibility. Native tools like Recycle Bin and Legal Hold are designed for small-scale recovery, not mass-deletion events.

How does Rubrik handle M365 recovery differently from native Microsoft tools?

Rubrik focuses on minimally viable business recovery — identifying the most critical users and their most important data and restoring those first. This approach works within Microsoft's API rate limits and aligns recovery sequencing to business objectives rather than attempting a slow, undifferentiated full-tenant restore.


Categories:
  • » Webinar Library » Rubrik
  • » Data Protection » Backup & Recovery
  • » Data Protection
Channels:
News:
Events:
Tags:
  • Data Protection
  • Backup & Recovery
  • Security Operations
  • Best Practices
  • Getting Started
  • Microsoft 365 data protection
  • Cyber attack recovery
  • Shared responsibility model
  • Minimally viable business recovery
  • MSP sales motion
  • SaaS backup
  • Ransomware resilience
Show more Show less

Browse videos

  • Related
  • Featured
  • By date
  • Most viewed
  • Top rated
  •  

              Video's comments: Rubrik: Protecting Microsoft 365 Data from Cyber Attacks

              Industry Events (Sponsor Hosted)

              • Oct
                13

                Transitioning from CJIS to FERPA: Essential Audit Evidence for Compliance

                10/13/202601:00 PM ET
                • Oct
                  15

                  Risk in Real Time Demo Series: Virtual Patching: Protection at the Speed of Exploitation

                  10/15/202611:00 AM ET
                  • Oct
                    20

                    Harnessing Data Governance for AI with Cyera and Snowflake

                    10/20/202611:00 AM ET
                    • Oct
                      27

                      Maximize Security, Value, and Returns on Your Microsoft Investment

                      10/27/202611:00 AM ET
                      • Oct
                        27

                        The HUMAN Experience: Real-Time Insights into Page Intelligence

                        10/27/202601:00 PM ET
                        More events

                        Upcoming Webinar Calendar

                        • 10/13/2026
                          01:00 PM
                          10/13/2026
                          Transitioning from CJIS to FERPA: Essential Audit Evidence for Compliance
                          https://www.truthinit.com/index.php/channel/2159/transitioning-from-cjis-to-ferpa-essential-audit-evidence-for-compliance/
                        • 10/15/2026
                          11:00 AM
                          10/15/2026
                          Risk in Real Time Demo Series: Virtual Patching: Protection at the Speed of Exploitation
                          https://www.truthinit.com/index.php/channel/1372/risk-in-real-time-demo-series-the-autonomous-era-orchestrating-a-resilient-enterprise/
                        • 10/20/2026
                          11:00 AM
                          10/20/2026
                          Harnessing Data Governance for AI with Cyera and Snowflake
                          https://www.truthinit.com/index.php/channel/2137/harnessing-data-governance-for-ai-with-cyera-and-snowflake/
                        • 10/27/2026
                          11:00 AM
                          10/27/2026
                          Maximize Security, Value, and Returns on Your Microsoft Investment
                          https://www.truthinit.com/index.php/channel/2178/maximize-security-value-and-returns-on-your-microsoft-investment/
                        • 10/27/2026
                          01:00 PM
                          10/27/2026
                          The HUMAN Experience: Real-Time Insights into Page Intelligence
                          https://www.truthinit.com/index.php/channel/2139/the-human-experience-real-time-insights-into-page-intelligence/
                        • 10/28/2026
                          01:00 PM
                          10/28/2026
                          [AMERICAS:] Secure AI Everywhere: Visibility, governance and protection for the agentic era
                          https://www.truthinit.com/index.php/channel/2126/securing-ai-across-the-americas-strategies-and-insights/
                        • 11/04/2026
                          11:00 AM
                          11/04/2026
                          Leveraging CISA’s Zero Trust Maturity Model in an AI-Driven Landscape
                          https://www.truthinit.com/index.php/channel/2149/leveraging-cisas-zero-trust-maturity-model-in-an-ai-driven-landscape/
                        • 11/04/2026
                          11:00 AM
                          11/04/2026
                          Aligning Agentic Intent: Understanding Your Agents' Purpose vs. Their Actions
                          https://www.truthinit.com/index.php/channel/2158/aligning-agentic-intent-understanding-your-agents-purpose-vs-their-actions/
                        • 11/05/2026
                          02:00 PM
                          11/05/2026
                          HUMAN Dialogue: Embracing the Rise of the Agentic Consumer in AI
                          https://www.truthinit.com/index.php/channel/2160/human-dialogue-embracing-the-rise-of-the-agentic-consumer-in-ai/
                        • 11/05/2026
                          02:00 PM
                          11/05/2026
                          Reclaim Your Evenings: Leverage Data Intelligence to Minimize Risk and Boost AI Adoption
                          https://www.truthinit.com/index.php/channel/2172/reclaim-your-evenings-leverage-data-intelligence-to-minimize-risk-and-boost-ai-adoption/
                        • 11/19/2026
                          01:00 PM
                          11/19/2026
                          360View: Govern, Secure & Recover Your Microsoft 365 Environment
                          https://www.truthinit.com/index.php/channel/2076/360view-govern-secure-recover-your-microsoft-365-environment/
                        Truth in IT
                        • Sponsor
                        • About Us
                        • Terms of Service
                        • Privacy Policy
                        • Contact Us
                        • Preference Management
                        Desktop version
                        Standard version