
Ask FirstNet about Cloud
Data Protection & Ransomware Resilience
Layered protection with immutable backups and rapid recovery to outpace modern threats.
The Challenge
Ransomware, insider threats, accidental deletion.
A single control is not enough; resilience layered defences and verifiable recovery. Traditional backups can be tampered with or encrypted by attackers. Organisations need immutable storage and isolated recovery environments to ensure clean restores.
Quick answers
How are immutable backups different?
They are write‑once copies that cannot be altered or deleted within the retention window, preventing attackers from encrypting or erasing them.
Do you offer isolated recovery?
Yes. We maintain offline or logically isolated copies to ensure a clean recovery path.
What's the right RPO/RTO for us?
We work with application owners to define business‑aligned objectives and design the platform accordingly.
Doesn't Microsoft or Google already back up our data?
They keep the service available, but under the shared-responsibility model, recovering deleted or encrypted data and keeping long-term retention is up to you. An independent backup copy means recovery doesn't depend on the platform you're trying to recover.
Our Expertise
Data protection architectures combine policy-driven
back-ups.
At FirstNet, a single control is not enough; resilience requires layered defences and verifiable recovery.
- Immutable Backups: write-once, tamper-resistant copies that attackers cannot modify.
- Air-Gapped Copies: isolated recovery points for worst-case scenarios.
- Faster Recovery: granular or full-system restores to meet tight RPO/RTO targets.
- Compliance & Audit: retention policies and reports that satisfy auditors.
- Cost Control: tiered stage to balance performance and economics.
How We Deliver
Backup platforms with secure storage tiers.
At FirstNet, our approach ensures you can restore data and systems quickly, containing the blast radius, and meet regulatory expectations for retention and reporting.
We blend proven backup platforms with secure storage tiers and continuous monitoring to deliver measurable resilience.
Policy & Design
Classify data, set retention, and define recovery objectives by application tier.
Platform Integration
Backup agents, snapshot orchestration, and API-level automation.
Threat Detection
Backup anomaly alerts and malware scanning to catch issues early.
Recovery Assurance
Regular restore testing and documentation to prove readiness.
Explore the details
Case studies: Public sector and manufacturingImmutable copies protected critical records from encryption attempts; clean restores completed in hours…

Public Sector
Immutable copies protected critical records from encryption attempts; clean restores completed in hours.

Manufacturing
Anomaly alerts flagged unusual change rates, preventing widespread data loss.
Protect data outside your serversMicrosoft and Google keep their platforms running, but recovering deleted or encrypted data is still your…
SaaS and endpoint backup
Protect data outside your servers
Microsoft and Google keep their platforms running, but recovering deleted or encrypted data is still your responsibility. FirstNet Cloud Backup Services, powered by Druva, keep an independent copy you can search and restore, with no backup infrastructure to run and no storage-cap planning.
Microsoft 365 Backup
Exchange Online, OneDrive, SharePoint Online, Teams, Groups and Microsoft Entra ID, as configured. Licensed per protected user.
Google Workspace Backup
Gmail, Drive including Shared Drives, Calendar and Contacts, as configured. Licensed per protected user.
Endpoint Backup
Selected data on Windows, macOS and Linux laptops and desktops. Licensed per protected device.
Managed Backup Service
Optional add-on: FirstNet handles implementation, monitoring, remediation, reporting and restore support.
Typical restore timesThese are typical ranges, not SLAs. Actual times depend on tenant size, item size, Microsoft or Google…
Recovery expectations
Typical restore times
These are typical ranges, not SLAs. Actual times depend on tenant size, item size, Microsoft or Google throttling and connectivity. If restore time is a hard requirement, we confirm it with a proof of concept.
Single email or file
Minutes
Full user (mailbox and OneDrive)
Hours
Full SharePoint site or Teams content
Hours to 1–2 days
Bulk event across many users
Days, driven by a prioritised runbook
Choose the right vault tierServer and VM backups land in Veeam Data Cloud Vault, which is always encrypted and supports immutability…
Immutable offsite vault
Choose the right vault tier
Server and VM backups land in Veeam Data Cloud Vault, which is always encrypted and supports immutability. You choose an edition and a region catalogue based on resilience, residency and cost.
Foundation
Locally redundant storage in a single region. Cost-optimised for workloads that can recover from one region.
Advanced
Zone-redundant storage across availability zones where supported, for business-critical data that needs higher resilience.
Core or Non-Core regions
Core covers major cloud regions. Non-Core extends to regions such as South Africa for residency or latency needs.
We’ve got you covered in the cloud. Choose us as your long-term partner.
Why Choose FirstNet
Validate backup integrity recovery times, threat detection.
Is this the same as Microsoft Purview or Google Vault?
No. Purview and Vault focus on compliance, eDiscovery and retention controls inside the platform. Backup gives you a separate copy you can restore from. Many regulated organisations use both.
Who runs the backups day to day?
By default, your team does. If nobody owns monitoring, failed-backup fixes and restore testing, including after hours, add the Managed Backup Service and FirstNet takes care of it.
How often should we test restores?
At least quarterly is a good benchmark. If you can't show recent restore tests and audit evidence when asked, that is usually the sign to bring in managed operations.
Can backup data stay in South Africa?
For server and VM backups, the Non-Core vault catalogue includes South African regions. For SaaS backup we confirm hosting regions during qualification, as availability varies by service.
What Microsoft 365 data does FirstNet cloud backup protect?
FirstNet Microsoft 365 Backup, powered by Druva, protects Exchange Online, OneDrive, SharePoint Online, Teams, Groups and Microsoft Entra ID, as configured. It keeps an independent copy of that data outside your Microsoft 365 tenant, so you can search for and restore individual items, whole users or whole sites after deletion or a ransomware incident. It is licensed per protected user, and there are no backup servers for you to run.
Can FirstNet back up Google Workspace?
Yes. FirstNet Google Workspace Backup, powered by Druva, protects Gmail, Google Drive (including Shared Drives), Calendar and Contacts, as configured. It gives you an independent copy that you can search and restore when data is deleted or encrypted, without running any backup infrastructure. It is licensed per protected user. If you use both Google Workspace and Microsoft 365, the two subscriptions can be combined so you have one approach across both platforms.
Do we need to back up laptops if we already use OneDrive or Google Drive?
Often, yes. Not all business data lives in OneDrive or Google Drive, and files kept only on a device can be lost if the device is lost, fails or is hit by local ransomware. FirstNet Endpoint Backup protects selected user and device data on Windows, macOS and Linux laptops and desktops, and is licensed per protected device. It does not cover Microsoft 365 or Google Workspace application data, which needs its own backup subscription.
How quickly can deleted Microsoft 365 data be restored?
It depends on what you are restoring. A single email or a single OneDrive or Drive file typically takes minutes. A full user's mailbox and OneDrive typically takes hours. A full SharePoint site or Teams content can take from hours up to one or two days. A bulk event affecting many users can take days and is managed through a prioritised plan. These are typical ranges, not guarantees: size, Microsoft throttling and connectivity all affect them, and a short proof of concept can confirm a hard requirement.
Is there a storage limit on Microsoft 365 and Google Workspace backup?
The service is designed so you don't have to plan around storage caps or capacity calculations. It is licensed per protected user, or per protected device for endpoints, rather than per gigabyte of backup storage. Your retention requirement, and any fair-use conditions, are confirmed when the service is scoped. Unusual retention needs, such as legal hold, are reviewed separately so the service is set up to match them.
Do we need to run backup servers to protect Microsoft 365?
No. FirstNet Cloud Backup Services are cloud-native, so there are no backup servers or storage for you to buy, install or maintain. You choose the workloads to protect, which can be Microsoft 365, Google Workspace, endpoints or any combination, and the service keeps an independent copy that you can restore from. If you don't have staff to monitor jobs and handle restores, an optional managed backup service adds FirstNet-run monitoring, remediation, reporting and restore support.
How can a cloud backup help us follow the 3-2-1 backup rule?
The 3-2-1 rule calls for an offsite copy of your backups. If you already run Veeam on-premises, you can add FirstNet's Cloud Connect repository and create a backup copy job that sends each nightly backup to a FirstNet cloud vault. That gives you a geographically separate copy without new hardware or separate backup software. If a disaster affects both your primary site and your local backups, the cloud copy is still available to restore from.
FirstNet ensures a resilience review to validate backup integrity, recovery times, and threat detection coverage.
Book a Cloud Readiness Assessment to map migration phases, timelines, and measurable business outcomes.
From the Knowledge Hub
In-depth answers about Data Protection & Ransomware Resilience
Each question above links to its full answer.
All 15 answers about this service →Your place in the stack
Cloud is layer 2 of 5.
Enriched by Sovereign AI Run AI next to your data: the AI Factory sits in the same FirstNet data centre as your private cloud and colocation. Explore the AI Factory →



