Maximising Microsoft 365: Email Security, Data Protection, and Opportunities for MSPs

24 October, 2024

Email is the cornerstone of business communication, with 5.6 billion active accounts worldwide, business users receive an average of 121 emails, spending four to five hours daily managing their inboxes. Compared to platforms like Slack or Facebook, email remains the most essential tool, especially as the first point of contact for account creation and the last line of defense in authentication and password recovery.

Given its importance, it’s no surprise that 70% to 90% of cyberattacks begin with email. Microsoft 365 boasts over 400 million paid seats, making it the leading platform for business email and collaboration. M365 users are more likely to invest in premium services, making M365 a key opportunity for MSPs.

Simply put, Microsoft is leading the email and collaboration space with M365, but there’s a common misconception: M365 doesn’t automatically protect your data.

Microsoft’s Services Agreement, as of September 30, 2023, states that while Microsoft ensures service availability, data protection is your responsibility. They recommend regular backups using third-party services, emphasising that Microsoft is not liable for any data loss.

Many people assume their data is automatically backed up just because it’s in the cloud, but this isn’t the case. With cloud services like M365, regular backups aren’t always included, and insurance often requires third-party backups to mitigate risks and ensure faster recovery.

Microsoft’s significant investment in M365, spending $23 billion on marketing last year, highlights its importance. For MSPs, every M365 user represents an opportunity to offer additional services, like backups and advanced security.

Recent analyst reports rank Acronis as a top five backup provider for both M365 and Microsoft Azure, underscoring the value of integrating such services into your offerings. <add reference here>

Make sure to check them out, they could be valuable for your strategy.

Acronis Cyber Protect Cloud

We know protecting email is vital, and it’s crucial for MSPs to manage it effectively.

The Acronis Cyber Protect Cloud, is a comprehensive solution for MSP, to manage and protect their clients’ data, all from a single pane of glass. It provides the flexibility you need to operate as an MSP.

Here’s a streamlined overview focusing on setting up a Microsoft 365 backup and the capabilities it offers.

  1. Centralised Management: Allows MSPs to manage clients, services, quotas, and more from a single interface, offering flexibility and ease of use.
  2. Setup: Integrate Microsoft 365 by logging in as a global administrator. The system pulls in all users, teams, and groups automatically.
  3. Broad Coverage: Supports various workloads beyond Microsoft 365, such as virtual machines, Google Workspace, mobile devices, and Azure Virtual Machines, all managed from one platform.
  4. Dynamic Folders: Use dynamic folders for efficient user management and backups. These folders automatically update with changes, ensuring backups are current without manual adjustments.
  5. Backup Flexibility: Set up backups for entire organisations or specific groups with options for daily or more frequent backups. Retain backups according to your policies, with unlimited cloud storage.
  6. Recovery Options: Restore data easily, including entire mailboxes, specific emails, or files from OneDrive, Teams, or SharePoint. Supports recovering data even from deleted users or revoked licenses.
  7. User-Friendly Interface: The Acronis console simplifies data recovery, allowing for granular or full restores and easy navigation between backup versions.

Overall, Acronis Cyber Protect Cloud offers a robust and flexible solution for managing and securing diverse data environments.

Layering Protection

For MSPs, reselling M365 licenses is just the starting point. The real value comes from layering on management services, M365 backup, and advanced security features. A “good, better, best” model can help you structure these offerings:

  • Level 1: M365 licenses with management and backup services.
  • Level 2: Add advanced security, including email and collaboration security.
  • Level 3: Include advanced security with Endpoint Detection and Response (EDR) for comprehensive protection.

By pricing these packages strategically, you can encourage customers to opt for higher levels of protection, ensuring they receive the coverage they need while maximising your revenue.

This approach not only highlights the importance of M365 but also positions your services as essential for comprehensive, layered protection.

Case Study Snapshot: Nueva Solutions

Overview
Founded by Ferdinand Tajaman and his partner during the pandemic, Nueva Solutions capitalised on the surge in digital and SaaS adoption. Specialising in next-gen cybersecurity, they offer comprehensive services including Governance Risk Compliance (GRC), Defensive and Offensive Security, and Managed Security Services.

Initial Transition
Nueva Solutions began with Google Workspace but switched to Microsoft 365 due to data sovereignty concerns from government clients. This move ensured compliance with data regulations and better met client needs.

Evolving Services
Their offerings now encompass Microsoft’s productivity, collaboration, Azure cloud computing, and AI tools like Copilot. They manage these services end-to-end, including setup, support, security monitoring, and compliance.

Challenges and Education
A common misconception is that cloud services are automatically backed up and secure. Nueva Solutions educates clients on the Shared Responsibility Model, emphasising the importance of robust backup and recovery solutions to prevent data loss, especially from incidents like intentional deletions or phishing attacks.

Incident Response
In one instance, Nueva Solutions faced a major challenge recovering emails from a former employee due to inadequate prior backup solutions. They were able to implement effective backups for other clients, handling issues such as phishing attacks and account compromises, and restoring security.

Effective Packaging
Nueva Solutions creates tailored bundles of Microsoft licenses and cybersecurity services based on client needs. They offer tiered packages (small, medium, large) that include endpoint protection, email security, remote monitoring, and security assessments, adjusting based on industry and specific threats.

Their strategy ensures that clients receive valuable, customised solutions to meet their security and compliance needs.

Now is the time to act to protect your business from email-based cyberattacks. 

Reach out to us at cloud@au.synnex-grp.com to explore the potential of Acronis solutions and offer your customers the comprehensive protection they need.

Source and credit: Some content in this article is extracted from the ‘Email security in M365’ webinar hosted by Synnex and presented by Jeff Hardy, Manager of Global Service Provider Solutions, Acronis.