Secure by Design

Adding security to an already existing infrastructure is significantly more challenging and costly than considering it during the design phase. This is especially crucial when designing a Veeam Backup for a Microsoft 365 environment; a solid foundation is key.

Overly complex designs pose difficulties for the IT team to manage and monitor, making it easier for an attacker to exploit vulnerabilities and remain undetected. Simpler designs, which can be easily overseen, inherently provide a higher level of security. Adhering to the K.I.S.S. principle (Keep It Simple, Stupid) is essential for designing secure systems.

Note: KISS principle, introduced by the U.S. Navy in 1960, emphasizes that most systems function optimally when kept simple, avoiding unnecessary complexity. This principle suggests that simplicity should be a primary goal in design.

Isolation

The Veeam Backup for Microsoft 365 application is specifically designed for a singular task – securely backing up Microsoft 365. Therefore, it is best practice to isolate the Veeam Backup for Microsoft 365 infrastructure components from any other workloads and minimize unnecessary connections.

For instance, if you plan to deploy your Veeam Backup for Microsoft 365 infrastructure on Microsoft Azure, it is advisable to place the Veeam Backup for Microsoft 365 infrastructure components within a dedicated subscription.

---