What You Need to Know About SaaS Application Data Protection

ROADMAP INFORMATION DISCLAIMER
• EMC makes no representation and undertakes no obligations with
regard to product planning information, anticipated product
characteristics, performance specifications, or anticipated release
dates (collectively, “Roadmap Information”).
• Roadmap Information is provided by EMC as an accommodation to the
recipient solely for purposes of discussion and without intending to be
bound thereby.
• Roadmap information is EMC Restricted Confidential and is provided
under the terms, conditions and restrictions defined in the EMC Non-
Disclosure Agreement in place with your organization.

PROTECTING YOUR SAAS DATA
WHAT YOU NEED TO KNOW

TWEET US!
Back that SaaS up with @SpanningBackup
#CloudProtectionRocks #EMCWORLD
Got SalesForce?
Live from EMC World!

“In 2015, the thing I’m most
interested in is SaaS backup.”
Who recently said?
Jason Buffington
Senior Analyst, Data Protection
Enterprise Strategy Group, Inc. (ESG)

“As you move to cloud applications,
unless you’re using one of the few SaaS
data protection solutions, your data has
just gone from well protected to
unprotected.”
And then…
Jason Buffington

“If you move half of your servers in to
SaaS services, your SaaS backup solution
is your data protection plan for 2015”
And finally…
Jason Buffington
http://mathaml.in/emcw_esg

Why would he say that?

TODAY’S AGENDA
• Why is backup and restore is needed for SaaS apps?
• What data protection is provided and what’s
missing?
• How you can minimize data loss and empower
users?
• Case Study: AMAG Pharmaceuticals
Mat Hamlin
Director of Products
Spanning by EMC Steve Simmons
Senior Director
IT & Cloud Architecture
AMAG Pharmaceuticals

Why should you back up your
SaaS applications?

You are responsible for
your data

“With Office 365, it’s your data. You own it. You
control it.”
SAAS VENDORS EVEN SAY SO
“To put it simply, Google does not own your data”
“Nothing is more important to our company than
the privacy of our customer’s data”

AUDITORS SAY YOU’RE RESPONSIBLE
Cobit5 - Manage Continuity, DSS04
Establish and maintain a plan to enable the business and IT to
respond to incidents and disruptions in order to continue
operation of critical business processes
Measured by: Percent of successful and timely restoration
from backup, and acceptance by the enterprise
Your responsibilities for protecting your data in the
cloud are no different than your responsibilities for
protecting on-premises data

WHO ON YOUR TEAM IS RESPONSIBLE?
I II
Backup
Admin
(IT)
SaaS
Admin
(Business)

Cloud Deployment Models
Users Users Users
Data Data Data
Application Application Application
HOW DID THIS HAPPEN?
Users
Data
Application
Middleware
OS
Virtualization
Hardware
Network
Middleware Middleware
OS OS
Virtualization
Hardware
Network
On-Premises SaaS
Virtualization
Hardware
Network
IaaS
Middleware
OS
Virtualization
Hardware
Network
PaaS

Organizations Lose Data in
SaaS Applications

Source: IDG and Spanning research
58%
of companies using
SaaS apps reported
they’ve lost data
SAAS DATA LOSS IS COMMON

TOP 5 REASONS FOR SAAS DATA LOSS
Hardware Failure
Software Failure
Natural Disaster
Power Outage
Human Mistakes
Programmatic Errors
Malicious Insiders
External Threats
Viruses/Malware

“Some organizations may not realize that
SaaS providers' high availability and disaster
recovery capabilities could fall short in
preventing data loss triggered by user errors,
data corruption or malicious attacks.”
Gartner agrees…
“Do You Need to Cover Your SaaS to Prevent Data Loss?”
by Pushan Rinnan, Dave Russell

What data protection is
provided by SaaS vendors
and what’s missing?

WHAT IS PROVIDED?
AMAZING, SLA-BACKED APPLICATION PROTECTION
Availability
Security
Reliability
“real-time replication”
“clustered active servers”
“RTO and RPO of ZERO!”
“SSAE 16 SOC2 Type II”
“continuous intrusion detection”
“multi-factor authentication”
“OWASP development”
“secure coding patterns”
“BitLocker encryption”

WHAT IS PROVIDED?
LIMITED PROTECTION FOR USER GENERATED DATA LOSS (NO SLA)
Trash/Recycle
Legal Hold
Restore Service
Data often ages out (14/30/90 days)
Can be emptied by end users
Doesn’t include edited versions of data
Typically only Mail
Extremely limited access
No restore options
Limited availability
Costly services engagement
Slow and typically “best effort”

WHAT’S NOT PROVIDED?
COMPLETE DATA PROTECTION AND POINT-IN-TIME RESTORES
SaaS providers can’t completely protect your data
• They promise to delete data when you ask them to; it’s your data!
• They just can’t tell if the “delete/edit” request is legitimate or not
SaaS providers can’t quickly restore data, if at all
When data is deleted
from Google, it’s not
recoverable
Salesforce data
recovery is a paid
service, $10k+
Microsoft Office 365 SLA
doesn’t include data
recovery

SHARED RESPONSIBILITY FOR DATA
Hardware Failure
Software Failure
Natural Disaster
Power Outage
Human Error
Programmatic Errors
Malicious Insiders
External Hackers
Viruses/Malware
You
Provider

How you can minimize data
loss and empower users?

WITH SPANNING BACKUP BY EMC

SPANNING IS BORN-IN-THE-CLOUD BACKUP
Spanning Backup for
4500+ Customers
Spanning Backup for
Top Rated
Spanning Backup for
Automated backup and recovery for Office 365
Mail, People and Calendars
– Granular, point-in-time backup & direct restore
– Clear and complete status monitoring
– Web, mobile and tablet interfaces
empowering end users

SPANNING BACKUP FOR OFFICE 365

Quick, Accurate Restores
• Empowers end users and administrators to quickly
restore any or all data from previous point-in-time
Easy to Manage and Monitor
• Installs in minutes, and keeps admins informed with clear
and actionable status reporting
Secure and Trusted
• SSAE 16 certified, trusted by thousands of organizations
around the world
THE SPANNING DIFFERENCE:

Customer Case Study:
AMAG Pharmaceuticals

AMAG Pharmaceuticals, Inc. is committed to improving the health outcomes
of patients through the development and commercialization of specialty
pharmaceutical products. We help patients better understand the causes and
impact of conditions through communities like ironmatters.com, which
spreads the word about the overall importance of iron’s role in maintaining
good health.

• Why we moved to cloud applications?
– Rapid deployment and scaling
– Do more with less IT
– Speed and collaborative features of the cloud
• What have we moved to cloud services?
– Almost everything. SaaS, PaaS, IaaS
– Productivity, messaging, collaboration, e-fax, SSO
• What results have we gained from the move?
– A mobile workforce, making it easier to conduct business
– IT increased focus on education, training, and adoption
OUR CLOUD FIRST STRATEGY

• Why we felt the need for SaaS Data Protection?
– To maintain compliance with our existing IT controls
• What was our criteria for evaluation?
– Someone we could trust and build a relationship with
– Accurate restores from data loss events
– Termination workflow Suspend account and keep data
– Low cost and just easy!.. Adding 150 new users takes minutes.
• What benefits / results have we received?
– IT organization feels covered and confident
– The ability to quickly restore data to any account
OUR NEEDS FOR DATA PROTECTION

Data Loss Story:
Missing Data in
Google Drive

• Your data protection requirements and responsibilities
don’t change when you move to the cloud
• Work with your IT and the Business organizations to
ensure all your data is covered
• Select a SaaS data protection vendor who you trust
MY RECOMMENDATIONS

MORE ABOUT CLOUD DATA PROTECTION!
Breakout Sessions Date Time
Cloud-Ready Data Protection Built for the
Software Defined Datacenter
Tuesday, 5/5
Thursday, 5/7
4:30-5:30 PM
10-11 AM
Data Protection for Enterprise Hybrid
Cloud
Monday, 5/4
Thursday, 5/7
1:30-2:30 PM
10-11 AM
What You Need to Know about SaaS
Application Data Protection
Monday, 5/4
Thursday, 5/7
4:30-5:30 PM
11:30 AM-12:30 PM
Buckle Up! A 15-Demo, Technical Tour of
What’s New – and What’s NEXT – in EMC
Data Protection and Availability
Monday, 5/4
Wednesday, 5/6
3-4 PM
3-4 PM
Birds of a Feather Sessions Date Time
Application and Database Data Protection Wednesday, 5/6 1:30-2:30 PM

MORE ABOUT CLOUD DATA PROTECTION!
Hands on Labs Date Time
Long Term Retention to the Cloud:
EMC NetWorker & CloudBoost
Monday, 5/4
Tuesday, 5/5
Wednesday, 5/6
Thursday, 5/7
11 AM – 9 PM
7 AM – 7 PM
7 AM – 5 PM
7 AM- 3 PM
EMC Data Protection for the Software
Defined Datacenter
Monday, 5/4
Tuesday, 5/5
Wednesday, 5/6
Thursday, 5/7
11 AM – 9 PM
7 AM – 7 PM
7 AM – 5 PM
7 AM- 3 PM

 RACE A CAR TO WIN
 RECHARGE YOUR DEVICES – AND
YOURSELF
 TAKE A DATA CENTER TOUR
 MEET WITH THE EXPERTS
 TAKE THE HANDS ON LABS
 COLLECT YOUR EMC FLAIR TO WIN
JOIN THE CONVERSATION
@EMCProtectData| @EMCStorage| @EMCXtremIO
VISIT EMC Products & Solutions
Booth #813

What You Need to Know About SaaS Application Data Protection

What You Need to Know About SaaS Application Data Protection

More Related Content

What's hot (20)

Similar to What You Need to Know About SaaS Application Data Protection (20)

More from Spanning Cloud Apps (9)

Recently uploaded (20)

What You Need to Know About SaaS Application Data Protection