Backup as a service (BaaS)

Backup as a service definition

Backup as a service (BaaS) solutions offercloud-based data backup andrecovery capabilitieswithout the presence of physical,on-premises hardware or appliances to host andrun the backup infrastructure. Unlike traditional data protection solutions which require self-managed backup software,along with tapes,disks,andphysical or cloudstorage,BaaS enables IT admins andprofessionals to offload backup application hosting andmanagement to a third-party cloud service provider.

Organizations simply connect to their BaaS solution to securely access,store,or recover data backup copies from a remote cloud location. This model helps reduces the upfront andoperating expenses associated with owning,installing,operating andmaintaining backup andrestore applications.

With cloud adoption,backup evolved from its traditional role as simple copying of data to a remote location into a more sophisticated data protection andbusiness continuity approach.

What is backup as a service?

BaaS is a SaaS-delivered solution that provides data protection andbusiness continuity capabilities. Copies of primary,application,or on-premises data are stored in the cloud andare maintained in a usable form that enables faster recovery following a disruptive event. Data copies are verified for integrity and,in most cases,kept in immutable,air-gapped locations which are decoupled andseparate from company networks. This isolation keeps backup copies out of the wrong hands andsafe from accidental andmalicious accidents. BaaS solutions can protect a range of workloads – with most vendors protecting SaaS or cloud application data. A more comprehensive BaaS solutionwill cover a range of workloads both on-premises andin the cloud. For protection of on-premises workloads,a resilient BaaS solution would enable making two copies of the data,one for faster onsite recovery andthe other for sending to a secure air gapped cloud storage location. Companies today are using the cloud for a safe backup repository to leverage its scalability,security,andcompliance capabilities.

What is backup as a service,andhow does it work?

As noted earlier,BaaS solutions seek to reduce management overhead,while protecting against data loss. BaaS solutions help companies prepare to quickly return the business to normal conditions whether facing accidental deletion,data corruption,or ransomware attack. Prudent planning calls for solutions which enable for fast recovery of data,andthe flexibility to rapidly restore backup copies whether kept onsite or in private/public cloud locations. Businesses need clear BaaS plans with details on the backup/restore processes,frequency andtypes of backup,testing andvalidating procedures,andprotocols for data restoration andbusiness continuity. During the entire lifecycle,special attention is needed to ensure robust security andadherence to regulatory requirements.

Types of backup managed by a backup as a service solution include:

• Full backup performs a complete copy of all data,or all content,on the devices designated as part of the backup process. This backup is performed at the start of implementing a backup policy.
• Incremental backup only copies the data that has changed since the last full backup job.
• A differential backup backs up all the data that has changed since the last full backup.

In addition to outlining backup frequencies,the backup policies andprocedures should also include therecovery point objective (RPO) metric,which defines how far back the data will be restored. The RPO value places demands on the systems involved requiring more resources for shorter RPOs.

A robust BaaS strategy can include:

• Clarity of procedures andschedules that outline the frequencies of backups andclarify the ownership andresponsibilities for each process.
• Choice of backup options to satisfy the needs of organizations in terms of the timing andfrequency of backups.
• Redundancy of backup copies to ensure fast recovery with nearby copy andair gap protected second copy for other occasions,including malicious attacks.
• Protection of data copies anddata by encrypting data in flight andat rest.
• Security with hardened,multi-layered controls to prevent unwarranted access andthe lateral movement or loss of data.

In addition,Backup as a Service can be purchased by a company as a SaaS-delivered solution for which they manage the day-to-day backup operations.

Alternately,a Managed Service Provider can offer backup as a service as a fully-managed,white glove offering that includes additional services like support,or backup job operations andmanagement.

Why is backup as a service important?

The amount of data created daily is staggering,andall of it must be stored andprotected against loss. By 2025,it is estimated that 463 exabytes of data will be created each day.¹ Users rightfully expect to have the data they need accessible andavailable around the clock. With a robust backup policy,businesses can back up andrestore their data andprotect it from potential loss.

In addition,because it does not require management andmaintenance of the backup infrastructure,a BaaS solution can significantly reduce management costs andtime spent,while reducing on-premises IT footprint.

Malicious disruptions. Data theft andbackup deletions by cybercriminals increased by400% since the start of the pandemic.² The cost of a data breach in the US increased 46% in 2020 compared to 2019,reaching an average cost of 8.64M. But not all attacks are external. The impact of data breaches extends beyond the economic costs andhas a long tail effect that extends for months after the disruptive event.

Unintended disruption. Unintended data loss is inevitable. From data corruption,to application failure,to accidental user or admin error,businesses of all sizes must properly prepare for outages anddata deletion events. Without a reliable data protection BaaS strategy in place,many businesses would suffer loss of vital data andextended disruptions anddisaster recovery times. In short,BaaS is your best option for keeping the engines of your business running andbrings them back to life faster in the event of an outage.

Benefits of backup as a service

Digital data andapplications are key drivers of business growth. Deploying a BaaS strategy is vital for protection against the potentially devastating impact of malicious data theft or negligent data loss.

Adopting andenforcing a backup policy can help enterprises in numerous ways:

• Cloud adoption. SaaS solutions revolve around simple subscriptions,predictable costs,andno large capital investments – making it an attractive andviable option for organizations today. Data protection is no different. BaaS data protection provides enterprise-grade protection with the same benefits andconsumption model as existing SaaS solutions,capable of helping companies deliver on cloud-first initiatives,shed tech debt without sacrificing security,andrapidly deploy andscale.
• Reducing Capex. Another critical benefit is the ability to transition from capital expenditures to operating expenditures. Instead of incurring large,upfront expenses – BaaS customers enjoy the benefits of predictable andflexible pay-as-you-go models. BaaS is budget friendly. It frees assets tied up in on-premises infrastructure,as no hardware or appliances are required. Furthermore,BaaS is automated andlowers the IT overhead associated with managing traditional backup/restore applications. BaaS solutions can also be deployed in minutes,are remotely managed,andinclude maintenance andupgrades built in.
• Ultimate flexibility. BaaS relieves the burdens of daily backup andrestore work. Deploy the solution in minutes,administer remotely,andleverage built-in,hassle-free upgrades andreleases. No more need for saving,labeling andtracking; just set up your BaaS andfocus on more valuable initiatives. Just set up,fire,andforget – knowing your backups are running without any user intervention. In addition to productivity gains,BaaS ensures data is protected andusable backup copies are security available in the cloud. This enables for rapid resumption of business following disruptive events. BaaS stores multiple copies for redundancy andenduring business continuity. In addition to that,BaaS allows access from anywhere.
• Data security andcompliance. Companies can take advantage of available data encryption to protect data traversing the network or at rest. Data copies are further protected behind air gaps that keep them safe andseparate from source andproduction data. Cloud providers also offer access management security services that guard against unauthorized access,as well as AI powered anomaly detection to spot ransomware andsuspicious file patterns. Companies can also leverage the broad capabilities of the cloud to help with regulatory compliance,including HIPAA,GDPR,SOC2,andISO 27001.
• All-inclusive storage. Industry-leading BaaS solutions offer effectively unlimited storage andunlimited retention built in. Businesses no longer have to worry about storage limits,egress charges,or hidden fees. Businesses get simple,transparent per user costs that dynamically grow with their business,while only paying for what they need.

Common use cases for backup as a service

Organizations of all sizes,especially SMBs,need protection against ransomware threats. Proper data protection allows customers to deploy solutions in everyday use cases:

• Cloud adoption. The cloud has reshaped how we work. In fact,transitioning from on-premises to cloud software is one of the fastest-growing company initiatives,helping to drive productivity,lower expenditures,andfacilitate remote working. BaaS plays a significant role in this transformation,enabling businesses of all sizes to accelerate their journey to the cloud while comprehensively protecting invaluable data – no matter where it lives within the organization.
• Business continuity. With BaaS,businesses can protect all of their data andbring business back to life following unpredictable disruptions. It is also worth noting that companies can access their apps anddata on the cloud in the event of trouble that renders on-premises resources inaccessible.
• Data protection. Without proper protection,your data remains susceptible to potential loss andcorruption. A correctly implemented BaaS strategy preserves your data integrity andprovides usable copies of lost or corrupted data. It also supports air-gapped copies for protection against malware.

• Disaster recovery. It is likely that all businesses andIT environments will face unexpected events that could cause data loss,corruption,or disrupt IT operations. Using a sound backup policy ensures recovery andreturn to normal with reduced risks due to unplanned disruptions.
• Backup SaaS data. It might surprise some users to learn that they are responsible for backing up data living in SaaS applications. Industry leading solutions,such as Microsoft 365andSalesforce,offer highly available andperformant applications. It is the customer’s responsibility to safeguard their own data coming to andleaving these applications. With an automated BaaS solution,businesses can comprehensively protect their SaaS app data securely with long-term retention – separate from source data.
• Regulatory compliance. Companies can use BaaS to respond to audits anddemonstrate compliance with data regulations through proper documentation andreporting. Many cloud providers provide broad support for regulatory compliance standards,including HIPAA,PCI-DSS,andSSAE/SOC 2 Type 1.

Does Commvault offer backup as a service?

Yes! Commvault supports a wide range of data backup andprotection services,including cloud backup,Commvault AirGap,that gives customers numerous options for storage andarchiving data. We supportfile andobjectstorage,databases,VMs andKubernetes,endpoints,Microsoft 365andSalesforce.

Our Commvault cloud solution offers a 360-degree view andtotal protection of your data from cloud-native to on-premises,andyour other diverse environments.

Sources

1. Raconteur. Data in a Day Infographic.
2. Entrepreneur April 2020. “FBI Sees Cybercrime Reports Increase Fourfold During COVID-19 Outbreak.”
3. Ponemon Institute 2020. “Cost of Data Breach Report 2014-2020.”
4. Call for Code October 2020. “The amount of data in the world doubles every two years.”