Backup standard for M365 — Veeam, Druva, alternative.it.decisions.d09

P0 G

Summary

Native retention is not backup. Decision owner (sheet): CISO + IT Head. Sheet target: Wk 2.

Rationale prompt skeleton

Capture the rationale for this decision. Sheet-recorded justification: "Native retention is not backup.". Reference the evidence questions, name the alternatives considered, and explain how this decision propagates to design, BoM, and operating model.

Default options (3)

veeam_m365 Veeam Backup for M365

Veeam's M365 backup product.

Pros

+ Mature product
+ Strong restore semantics

Cons

− License cost
− On-prem storage sizing

druva Druva inSync

SaaS-native M365 backup.

Pros

+ No infra to manage

Cons

− Vendor lock-in
− Subscription cost

other Alternative (Barracuda, AvePoint, etc.)

Other M365 backup vendor evaluated case by case.

Default approval chain

Admin
ExecutiveViewer

Linked evidence questions (2)

id	prompt	workstream
it.cloud_on_prem.q07	Per subsidiary: storage footprint (TB), tier mix (block/file/object), backup tooling, RPO/RTO targets, last successful DR test.	it.cloud_on_prem
it.cloud_on_prem.q08	Group-level backup standard — does one exist? M365 backup tool (Veeam/Druva/none — native retention is not backup).	it.cloud_on_prem