Keepit was honored in three categories: Cloud Security, Data Loss Prevention and Disaster Recovery/Business Continuity.

COPENHAGEN, DENMARK, December 13, 2024 – Keepit, a global provider of a comprehensive cloud backup and recovery platform, is proud to announce it has been recognized at the prestigious 2024 Security Today CyberSecured Awards. The company secured top honors in three categories: Cloud Security, Data Loss Prevention and Disaster Recovery/Business Continuity.

·       WINNER #1 in the category: Data Loss Prevention

·       WINNER #2 in the category: Disaster Recovery/Business Continuity

·       WINNER #3 in the category: Cloud Security (Tie)

Security Today, a leading source for security professionals, unveiled the winners in a press release, recognizing Keepit’s outstanding contributions to the cybersecurity landscape. The CyberSecured Awards celebrate innovation and excellence in cybersecurity solutions.

“The Keepit platform helps companies future-proof their businesses against ever-increasing cyberthreats. With our industry-leading backup and recovery capabilities, companies can rely on continued access to business-critical data, even if they’re targeted by cyberattacks. We’re honored that the Keepit platform was recognized by Security Today’s CyberSecured Awards”,” says Michele Hayes, CMO at Keepit.

Keepit’s commitment to innovation, security, and reliability has positioned the company as a leader in the cybersecurity industry. The Keepit platform was recognized in four categories at the Top Infosec Innovator 2024 Awards, including “Cutting Edge Cloud Backup”, “Most Innovative Cyber Resilience”, “Hot Company Data Security Platform” and “Hot Company Ransomware Protection of SaaS Data”.

Keepit has been awarded “Best Green Initiative” by the Business Awards UK, 2024 Corporate Sustainability Awards.

Copenhagen, Denmark – November 29, 2024 – Keepit, a global provider of a comprehensive cloud backup and recovery platform, today announced it has been awarded “Best Green Initiative” by the Business Awards UK, 2024 Corporate Sustainability Awards. Keepit’s data centers in the Americas and EMEA have been powered by 100% renewable energy since 2023.

Headquartered in Copenhagen, Denmark, with offices in the US, Germany, and the UK, Keepit counts The National Gallery and Oxford University Innovation Ltd among its UK customers.

“Keepit prides itself in having built its whole operation efficiently, with sustainability in mind. Providing our customers with the ability to secure their data on our platform, knowing we’re also doing our part to reduce environmental impact, is important to us as a company”, says Michele Hayes, CMO at Keepit.

Keepit’s continuing commitment to sustainability

Since 2023, all Keepit’s data centers in the Americas and EMEA have been powered by 100% renewable energy. Keepit reached this important green energy milestone ahead of other cloud-based backup vendors.

Keepit constructed its technology stack from the ground up, specifically designing it to efficiently address data storage challenges. This approach reflects a commitment to optimizing resource utilization and delivering a service that is not only effective but also resource efficient. Read more about Keepit’s commitment to sustainability.

Keepit platform was also named “Best Cybersecurity Backup Service” by Business Awards UK, 2024 Cybersecurity and Resilience Awards.

Here’s why you might want to double check 

How confident are you that your organization’s critical SaaS data is fully protected? If you’re not entirely sure, you’re not alone. A recent survey by Gatepoint Research of executive- and director-level respondents revealed that only 28% of IT and security executives feel fully confident in their current SaaS data protection and resilience measures. With SaaS applications like Microsoft 365 and Salesforce now essential to business operations across industries, ensuring SaaS data backup and recovery is crucial — and it’s becoming more challenging.

In a recent webinar, I talked about what these survey findings show about the state of SaaS data protection today — and why businesses need to rethink their approach to keeping their SaaS data secure. This article highlights the biggest takeaways from that conversation to help guide you on what your SaaS backup strategy should cover.

The shared responsibility model: Who’s really responsible for SaaS data protection?

When businesses move data to the cloud, many assume that providers like Microsoft, Google, or Salesforce have them covered. It’s a reasonable expectation — after all, if they’re securing the infrastructure, shouldn’t they also be responsible for protecting the data?

In reality, SaaS providers all operate under a shared responsibility model: They protect the application, but the responsibility for complete data backup falls squarely on the customer. The SaaS provider generally promises not to lose all your data at once, but they don’t necessarily protect your critical business data from deletion, corruption, encryption, or loss. It’s up to you to have a backup plan in place for your cyber resilience. Without an independent backup and recovery solution in place, data can be lost, leading to operational disruptions, compliance issues, and reputational damage.

Misunderstanding the shared responsibility model can lead to disastrous consequences, and the complexities around SaaS data protection underscores one of the reasons why so many executives express low confidence in their SaaS data protection measures.

Confidence crisis: Why so many executives are concerned about their SaaS data

The survey results show that 31% of executives weren’t confident in their SaaS data protection measures. This low confidence stems from several factors, including:

• Compliance and regulatory pressures: Global compliance regulations, from GDPR to NIS2 and DORA, demand that organizations maintain control over their data and prove that it’s secure. This is challenging, as regulations are evolving faster than many companies can adapt, increasing pressure on data governance and compliance. For example, DORA mandates that businesses in the financial industry maintain backup environments segregated from production environments to reduce risk.
• Increased risks from external factors: The frequency and severity of cyberthreats, such as ransomware, only continues to grow. With the advent of ransomware as a service (RaaS), the number of threat actors only stands to increase.
• Data growth and scalability: As more companies adopt SaaS applications, the volume of data continues to grow exponentially, making traditional backup strategies insufficient and underscoring the need for scalable solutions.
• Complexities in SaaS data backup: Many organizations rely on built-in SaaS backup tools that may not offer the robustness needed to guarantee data integrity and protection from threats like ransomware or accidental deletion, such as data immutability and air gapping.

Key challenges organizations face with SaaS data protection

The survey also delved into some of the key challenges executives say they face. Some of these are related to the reasons they don’t feel confident, but I was interested to see a couple of unique challenges reflected in their answers:

• Increasing compliance demands: Regulations like GDPR, NIS2, and DORA are forcing organizations to implement rigorous data protection measures. These compliance requirements are constantly evolving, leaving companies racing to keep up.
• Rapid growth of data: As SaaS usage increases, so does the volume of data, creating scalability challenges for organizations. Traditional backup solutions often fall short when managing the vast amount of data in today’s SaaS environments.
• Managing multiple backup vendors: Many companies juggle multiple backup providers across different SaaS platforms. This fragmented approach can make it difficult to enforce consistent data protection policies, and it increases the risk of gaps in coverage. The average number of SaaS apps used by “workplaces in transition” is more than 120, according to BetterCloud.

These issues compound the challenges organizations face in securing their SaaS data, especially when operating without a clear strategy or dedicated backup vendor.

What’s true SaaS data backup and what should it include?

To overcome these challenges, organizations need reliable backup solutions that are purpose-built for SaaS data. In this case, “purpose-built” really means that they’re built on an independent cloud infrastructure that ensures your data is protected, accessible, and separated from the production environment of the SaaS provider. This approach provides the ultimate safety net, enabling you to recover and restore data independently of your SaaS provider’s infrastructure. It’s why I call such a system a true backup, not just another copy of the data.

True backup also means maintaining immutable copies — versions of your data that can’t be altered, even by the most sophisticated threats. In recent years, ransomware attacks and malicious insiders have targeted cloud data, leading to data loss or corruption. A truly immutable backup, stored independently, can withstand these threats, ensuring that your data is always recoverable.

Of course, this isn’t a comprehensive list. If you’d like to read more about the top considerations for backup and recovery solutions, read our top 10 for RFP blog.

The ROI of backup and recovery

A dedicated SaaS data backup solution might seem like just another expense, but it brings considerable return on investment. Data loss or downtime can lead to significant financial impacts, both directly and indirectly. From potential fines for non-compliance to revenue loss due to service interruptions, the costs of not having a backup far outweigh the investment in a robust solution. You can also leverage cost avoidance in SaaS licensing fees with some backup providers. A comprehensive SaaS data backup strategy also protects your organization against reputational damage by ensuring uninterrupted service.

Practical steps to increase SaaS data protection confidence

Regular testing and clear data classification are crucial parts of any backup strategy. Here are a few takeaways for organizations looking to improve their SaaS data protection:

• Identify and classify your data: Identify what data is critical to your business and prioritize its protection. Knowing what information is most essential enables you to focus on securing the assets that would be most damaging to lose.
• Test and verify backup and recovery processes: Confidence in data protection comes from testing, so schedule regular recovery tests to ensure backups are complete and easily recoverable. Make sure multiple team members are trained to handle recovery to avoid dependence on a single individual.
• Evaluate your current backup solution: Check if your current backup solution meets modern standards of immutability, independence, and compliance. If your SaaS data is only partially covered or stored in the same environment as production data, it might be time to look for a more comprehensive solution.

Moving forward with a proactive approach to SaaS data protection

Ultimately, the goal is to be able to move from a state of “moderate confidence” to one of complete assurance. Data breaches and regulatory penalties are on the rise, and so investing in a robust, independent backup strategy is no longer optional. A true backup solution (one which stores backup data copies in a cloud independent from the production data) will not only help you meet compliance standards but will also provide the resilience and continuity your organization needs to thrive. Read more about creating a cybersecurity framework.

Another key takeaway is this: If your backup data is stored in the same place as your production data, it’s not really a backup. By investing in a purpose-built solution, you’re protecting data AND you’re strengthening your organization’s resilience by creating a safety net that keeps your business running smoothly, even in a crisis or SaaS provider outage. Learn more about air gapping.

In the end, confidence in your SaaS data protection isn’t just a nice-to-have; it’s a competitive advantage. Take the steps today to make sure your data is secure, accessible, and always within reach.

Takeaway: Backup isn’t just a safety net; it’s a strategic investment

Ultimately, having a true backup strategy for SaaS applications is not just about preventing worst-case scenarios. It’s a proactive step that empowers your organization to maintain control over its data, ensure regulatory compliance, and prevent costly downtime. By implementing a reliable SaaS data backup solution, you’re investing in resilience and building confidence that your business can withstand unexpected events, from cyberattacks to accidental deletions.

The lesson is clear: Don’t wait for a crisis to rethink your data protection. Take action today to safeguard your SaaS data with a robust, purpose-built backup solution that keeps your organization’s data secure, compliant, and always within reach.

Keepit wins at Cyber Defense Magazine’s 12th Annual InfoSec awards during CyberDefenseCon 2024  

COPENHAGEN, DENMARK. October 31, 2024 – Keepit, a global provider of a comprehensive cloud backup and recovery platform, today announced it has won in four categories at the Top Infosec Innovator 2024 awards. Keepit was named the winner in the following categories: “Cutting Edge Cloud Backup”, “Most Innovative Cyber Resilience”, “Hot Company Data Security Platform” and “Hot Company Ransomware Protection of SaaS Data”. 

Headquartered in Copenhagen with offices and data centers globally, Keepit future-proofs cloud data for organizations, ensuring business continuity and access to information.

“Ransomware is only one of the many threats companies face in today’s cybersecurity landscape. Keepit provides the tools for companies to be secure and confident in their disaster recovery plans: a platform that enables rapid recovery and data monitoring for early anomaly detection. We’re thrilled that Cyber Defense Magazine has recognized our platform for these coveted awards”, says Michele Hayes, CMO at Keepit.

“We scoured the globe looking for cybersecurity innovators that could make a huge difference and potentially help turn the tide against the exponential growth in cyber-crime. Keepit is worthy of being named a winner in these coveted awards and consideration for deployment in your environment,” said Yan Ross, Editor of Cyber Defense Magazine.

Keepit platform was also named “Best Cybersecurity Backup Service” by Business Awards UK, 2024 Cybersecurity and Resilience Awards  and  “Best Security Solution for Data Management / Data Protection” by the Cloud Security Awards 2024. Keepit was recognized in four categories at the Global Infosec Awards 2024 (at RSA), including “Most Innovative Compliance,” “Publisher’s Choice Cyber Resilience,” “Best Product Data Recovery,” and “Hot Company Ransomware Recovery.” The Keepit platform also received “Best Use of SaaS in a Cloud Ecosystem” at the 2024 SaaS Awards.

The full list of the Top InfoSec Innovators for 2024 is found here: https://cyberdefenseawards.com/top-infosec-innovators-for-2024/.

In today’s digital landscape, where cloud-based services like Microsoft 365 dominate, cyber resilience has become a top priority for organizations. Businesses are increasingly relying on SaaS (software-as-a service) platforms, assuming that all their data is secure. However, without the right backup strategy, they may find themselves vulnerable in the face of data loss or a cyberattack.

In this post, I want to share a real-world experience from a client that highlights the importance of SaaS data recovery and how it plays a crucial role in maintaining operational continuity.

A crisis unfolds

One of our partner’s clients, who remains anonymous due to confidentiality agreements, faced a daunting cyberattack that compromised their Microsoft Azure AD (Entra ID). Like many businesses, they believed their data was safe in the cloud, under Microsoft’s protection. What they didn’t realize, however, is that Microsoft’s services are not immune to data loss or breaches, and the responsibility for safeguarding data ultimately lies with the customer. This is part of what’s known as the shared responsibility model, where cloud providers handle infrastructure security, but data protection remains the customer’s responsibility. Read Microsoft’s shared responsibility in the cloud (source: Microsoft).

When the attack occurred, the client was caught off-guard. Administrative accounts were compromised, some user accounts were maliciously deleted, and there were attempts to exfiltrate sensitive data from SharePoint. The customer’s crisis committee immediately launched an investigation, but they quickly ran into a roadblock: Azure AD only retains logs for 30 days, making it impossible for them to perform an in-depth forensic analysis of what had transpired.

The flow of recovery

By using Keepit backup and recovery for Microsoft Entra ID (formerly Azure Active Directory), we were able to act quickly in response to the cyberattack in three broad steps:

• Downloaded the last 12 months sign-in and audit logs of Entra ID for investigative analysis using Keepit’s unlimited storage and retention capability.
• Traced when and what changes happened on the compromised accounts using Keepit for Entra ID metadata previewer feature.
• Restored the affected user accounts along with their configurations and permissions without needing to recreate accounts from scratch using Keepit for Entra ID’s powerful recovery features.

The power of backup

This is where Keepit became a game-changer. By leveraging Keepit’s robust backup capabilities, we were able to provide the customer with access to logs that spanned an entire year. This historical data was critical for the investigation, as it allowed the customer to trace the breach back to its origins, determine the extent of the damage, and understand when the attack had taken place.

But data recovery goes beyond simply accessing logs. The compromised user accounts needed to be restored, along with all their associated settings (metadata) — something that would have been a nightmare without the right backup solution. Keepit’s ability to restore not just user accounts but also their configurations, MFA settings, and group memberships ensured the client could recover quickly without having to start from scratch. If the client had relied on a standard backup solution, the process would have taken significantly longer, jeopardizing their recovery time objective (RTO).

The lesson: Backup is non-negotiable

This experience underscores a key lesson: Having a comprehensive SaaS data backup and recovery strategy is essential to cyber resilience. It’s not just about restoring files but about maintaining business continuity, even when the unexpected happens. The ability to quickly recover from a breach can mean the difference between a short disruption and a prolonged, business-threatening downtime.

For companies operating 100% in the cloud, like our client, backing up identity systems (such as Entra ID) is as crucial as backing up files. When administrative accounts are compromised, and there’s no backup, organizations face the risk of losing more than just data — they risk losing control over their entire cloud environment. Read more on why Microsoft Azure AD needs to be backed up in the cloud.

Cyber resilience starts with recovery

The ease and speed with which we were able to restore the client’s operations, thanks to Keepit, reaffirmed the central role that data recovery plays in cyber resilience. It’s not just about preparing for attacks but also about having the right tools in place to recover from them. This customer, through our guidance, has now included Keepit as a key component in their cyber resilience strategy. They understand that backup is no longer a nice-to-have; it’s a critical aspect of their business continuity planning.

In a world where the question isn’t if an attack will happen, but when, the ability to recover swiftly is a vital need. With Keepit, we were able to help our client turn what could have been a catastrophic breach into a manageable incident, all thanks to a well-implemented SaaS data recovery strategy.

This article is part one of a two-part series sharing a real-world customer story on cyber resilience. In part two, we look into how cyber insurance played a critical role in protecting a business from the financial impact of a ransomware attack. Read part two entitled “Real-world recovery: The role of cyber insurance in ransomware resilience.”