Name: The SaaS data security imperative: Understanding risks, mitigating threats, and ensuring resilience
Start: 2025-04-11T08:27:00Z
End: 2025-04-11T08:27:32.000Z
Location: BrightTALK
Rating: 4.5

Welcome to the Keepit BrightTALK channel, your go-to destination for essential insights on safeguarding your cloud data. As a leading cloud backup and recovery provider, Keepit understands the critical importance of protecting your digital assets in today's rapidly evolving cyber landscape. Our channel is dedicated to empowering businesses and individuals with expert knowledge and best practices to ensure the security, integrity, and compliance of their valuable data.

In this Keepit Reel, Thorbjørn Lynggaard Sørensen, VP Product Design and UX Research at Keepit, and Christian Lundberg, Commercial Sales Manager at Iver, discuss how intuitive design makes all the difference when every second counts. In this short video, they explore why ease of use is the key to unlocking faster recovery in a data loss scenario — empowering teams to act quickly, minimize downtime, and restore business continuity with confidence.

How ease of use unlocks speed to recovery

In this Keepit Reel, Kim Larsen, CISO at Keepit, and Liz Carrizal, IT Data Recovery Manager at NOV, discuss key considerations when selecting a data protection strategy. 

This insightful conversation dives into the shared responsibility model, the crucial importance of disaster recovery planning, and why choosing the right solution matters. From immutable backups to shareable restore links and a vendor-independent cloud, Liz shares how Keepit became the missing puzzle piece in her recovery strategy — and why it helps her sleep at night.

Choosing the right data protection

Increasingly complex cyber threats, rising compliance demands, and exponential growth of data stored in SaaS applications: Is your disaster recovery strategy ready for the challenge? Traditional DR models—designed for on-premises systems—haven’t kept pace with rapid SaaS adoption and fall short in addressing the unique risks of SaaS.

Many organizations still rely on the assumption that SaaS vendors will fully protect their data. The reality? Native SaaS protection lacks the breadth, depth, and recovery speed required to keep your business running. Add in the decentralized, offboarded nature of SaaS, where you lack visibility and control, and the gaps in disaster recovery readiness become clear.

Join us for an expert-led session introducing the SaaS disaster recovery (DR) maturity framework— this framework is the first-of-its-kind, built specifically to assess and improve disaster recovery maturity for SaaS environments. We’ll explore the five stages of maturity, help you identify where your organization stands, and provide practical recommendations to advance your readiness and resilience.

Hosted by Paul Robichaux, Microsoft MPV and Senior Director of Product at Keepit, Jeppe Schäfer, Global Strategic Solutions Engineer at Keepit and featuring guest speaker Brent Ellis, Principal Analyst at Forrester, this session will cover the pitfalls of conventional DR planning, how to assess your current maturity stage, and the actionable steps to elevate your recovery capabilities—ensuring your SaaS data remains accessible, compliant, and recoverable when it matters most.

Key takeaways:
- Understand the unique challenges of disaster recovery in SaaS environments
- Learn about the five stages of SaaS DR maturity—and where your organization stands
- Get actionable recommendations to advance your maturity
- Strengthen your readiness to recover quickly, completely, and confidently

From reactive to managed: The SaaS disaster recovery maturity framework

In this Keepit Reel, Kim Larsen, CISO at Keepit, sits down with Ben Jenkins, VP of Sales North America at Zerto, for a conversation about the realities of disaster recovery planning. 

This informative discussion challenges the assumption that backup equals recovery and explores the urgent need for businesses to shift their focus from prevention to recovery preparedness. From outdated backup technologies and inaccurate recovery estimates to the difficulty of restoring off-site copies, Kim and Ben dive into real-world examples of outages and ransomware attacks to highlight the importance of having a documented, tested, and repeatable recovery process.

Fundamentals of recovery and restoration

Immutability is just the beginning of achieving resilience by design. Securing static data isn't enough to actively retain control before, during, and after an incident. As organizations increasingly rely on SaaS and multi-cloud platforms, understanding who truly has control of your data—and how that control can be asserted, audited, and reclaimed—is vital to long-term resilience.

This session explores the following viewpoints:
- Strategic view – our SVP of Product will lay out emerging SaaS-backup architectures and policy controls.
- Adversarial view – Red Team Manager, will reconstruct a recent cloud-breach scenario to show exactly how attackers erase or encrypt backups and how immutable protection can break the kill-chain.

Red Team Tales and SaaS Strategies for Immutable Cloud Recovery

In this Keepit Reel, Henrik Brusgaard, VP of Product Development at Keepit, joins Siddick Elaheebocus, CEO of INNOVISION, for a deep dive into the essential steps organizations must take to build true cyber resilience. 

This insightful conversation explores five key priorities that businesses need to address today and offers quick wins, best practices, and strategic guidance to strengthen cyber resilience effectively. Don't miss this expert-led discussion on safeguarding your business against evolving cyberthreats.

Tips to achieve cyber resilience

In this Keepit Reel, Niels van Ingen, CCO at Keepit, sits down with Kim Larsen, CISO at Keepit, to discuss the importance of embracing a broader strategy centered on resilience. 

This insightful discussion reveals how effective data classification not only underpins recovery efforts but also serves as a cornerstone for building resilience in today’s rapidly evolving digital landscape.

Foundation of recovery: Data classification

In this video, Niels van Ingen, Keepit’s SVP of Business Development and Strategy, joins Dark Reading’s Terry Sweeney to explore the growing importance of data sovereignty. Together, they discuss why organizations—not SaaS providers—remain responsible for their data, the risks of ignoring shared responsibility, and how digital sovereignty is reshaping cloud strategy.

Where’s my data? Data sovereignty in the cloud

In this Keepit Reel, Niels van Ingen, CCO at Keepit, and Barb Kiernan, Enterprise Account Executive for Zerto, highlight the shift in responsibility of disaster recovery planning and preparation. What used to be in the hands of traditional storage and backup teams now falls largely on the security suite, with the Chief Information Security Officer (CISO) often driving decisions due to the increasing threats of hacking and ransomware.

They emphasize the importance of understanding the critical need for business continuity and cyber resilience and share insights on how security concerns have become central to budget allocations and strategic decisions in enterprises.

Considering business continuity

In this Keepit Reel, Niels van Ingen, CCO at Keepit, and Trent Widtfeldt, Chief of Engineering for the East at Technologent, emphasize their focus on becoming trusted advisors that help clients realize the value of their data.

They also discuss the strong element of risk management as the value of client data is fully understood and the conversation begins to shift towards cyber resilience and the growing integration of security in all technological practices.

When data intelligence meets risk management

It’s a hot environment out there where threat actors routinely bypass perimeter defenses. Adopting a breach-assumed mindset is no longer optional—it’s essential. This webinar dives into the technical fundamentals and real-world applications of SaaS data immutability as a core component of modern cyber resilience. 

We’ll examine how immutable storage architectures play a pivotal role in securing SaaS backups, logs, and critical datasets against ransomware, tampering, and unauthorized deletion. You'll gain insight into designing cloud infrastructure that enables rapid incident response — and regulatory compliance — even in post-compromise scenarios. 

Topics covered include: 
- Implementing immutable data stores within cloud-native environments 
- Integrating immutability into zero trust and assume-breach frameworks 
- Leveraging immutability for faster recovery point objectives (RPO) and incident containment 
- Understanding common pitfalls and how attackers attempt to circumvent immutability controls 
- Real-world breach case studies and architectural takeaways 

Whether you're building resilient systems from the ground up or hardening existing infrastructure, this session will provide actionable strategies to strengthen your data security posture.

Are you breach ready this summer? Learn how immutability minimizes damage

In this Keepit Reel, Niels van Ingen, CCO at Keepit, and Brent Ellis, Senior Analyst from Forrester, dive into the unique aspects of SaaS applications and how to develop disaster recovery plans for them. 

They discuss the importance of identifying which SaaS applications are being used within your organization to be fully aware of your risks. Shift the focus from IT management to risk management to ensure your SaaS disaster recovery plan is robust and effective.

First steps for your SaaS disaster recovery plans

In this Keepit Reel, Niels van Ingen, CCO at Keepit and Brent Ellis, Senior Analyst from Forrester delve into disaster recovery and data backup. They discuss the shared responsibility model, cloud backup, and infrastructure, emphasizing the importance of having the right tools and identifying associated risks. 

Ongoing education and critical questioning are crucial for effective risk management in backup and disaster recovery strategies. This entails understanding where responsibility lies and ensuring all risks are accounted for.

Considering shared responsibility in disaster recovery

Cloud dependency, increasing regulatory pressure, and ever more sophisticated threats to your data powered by AI: Is your data protection strategy resilient enough to withstand these challenges? In an era where data is more dynamic, dispersed, and targeted than ever, traditional security approaches are no longer enough. 

As organizations increasingly rely on data stored in SaaS applications, many overlook a growing risk: the fragility of conventional data protection. From the illusion of protection in the shared responsibility model to limited data control and backups becoming a target in cyberattacks, the cracks in conventional cloud backup are starting to show. Join us for an expert-led discussion where we unpack the core vulnerabilities in today’s data protection strategies and discuss a radically different architectural approach designed for security. 

This session will explore limitations of the public cloud, key components of a modern data protection strategy, and how AI is changing the game. Learn how to shift from a conventional approach to a proactive, security-first strategy, ensuring your data remains immutable, accessible, and always recoverable. 

 

Key takeaways:  
- Understand the role of AI in security and how it changes both threat and defense 
- Explore the drawbacks of conventional data protection strategies 
- Learn how to keep your SaaS data secure, compliant, and recoverable 
- Gain practical guidance to reduce cloud dependency and strengthen organizational resilience

Secure by design: Rethinking data protection in the AI era

Hybrid warfare, nation-state attacks, and increasing cyber risk — how resilient is your organization? 

As the line between physical and digital conflict blurs, CISOs and IT leaders face mounting pressure to protect critical infrastructure from sophisticated and ever-evolving threats. Join us for an expert-led session where we unpack the growing infrastructure and data threats and explore how organizations can strengthen their resilience. We’ll look at how hybrid warfare is reshaping the threat landscape, why traditional defenses aren’t enough, and what steps you can take to ensure business continuity in the face of disruption. 

Expect real-world insights, key strategies for protecting your systems, and guidance on how to move from reactive to resilient. We’ll cut through the noise and focus on what matters: Identifying real risks, understanding evolving attacks, and building a security posture that ensures operational continuity when and where it matters most. 

Key takeaways: 
- Understand the evolving threat of hybrid warfare and its impact on critical infrastructure 
- Identify common vulnerabilities and understand how attackers exploit them 
- Explore scenarios and exercises for your crisis management training 

Gain actionable steps to assess and strengthen your organization’s resilience

Resilience under fire: How to safeguard against hybrid attacks

As businesses increase their reliance on SaaS applications, regulators are increasing requirements for how that data is protected and secured against attacks and disruptions. There’s a tug-of-war between the regulators’ good intentions and the companies who bear the cost and difficulty of compliance — but are the benefits worth it in the end? Companies might welcome the support these regulations provide to justify critical security improvements to upper management and boards, ultimately strengthening long-term business resilience.  

In this session, we’ll discuss how emerging cybersecurity requirements like NIS2 and DORA are driving positive change by compelling organizations to prioritize resilience in their operations, and what organizations around the globe should expect from regulators in the future. Because one thing is for sure — we will never again face less regulation than we do now. 

Join us and you’ll walk away with: 
- A better understanding of how data protection ties to key regulations  
- Practical best practices for safeguarding SaaS data  
- Insight into how compliance both mitigates risk and strengthens resilience

The regulators made me do it: Enhancing cyber resilience with compliance regulations

Business leaders today must manage rapid data growth while countering sophisticated cyberthreats, making effective data governance crucial for a robust business continuity strategy. This session explores how robust data governance, extending beyond the CISO's office, underpins a resilient disaster recovery strategy. 

Join peers for an insightful discussion on governance strategies, aligning disaster recovery strategies with executive priorities, and integrating AI in recovery plans. Hosted by Kim Larsen, Keepit CISO, this webinar offers practical approaches to optimize data management, communicate strategies to leadership, and enhance organizational resilience.  

Join us to learn about: 

- Effective data governance models and approaches  
- Disaster recovery planning considering the impact of AI  
- Techniques for data prioritization and classification  
- Structuring recovery plans and conducting incident investigation

By signing up to this webinar, you'll also receive exclusive access to our new data governance report, "Intelligent data governance: Why taking control of your data is key for operational continuity and innovation." Be among the first to receive actionable recommendations on refining your data classification strategy, building an effective governance framework, preparing key questions for board discussions, and more to strengthen your data governance.

Data governance meets recovery: An intelligent approach to resilience

In an era where data is more dynamic, dispersed, and targeted than ever, traditional security approaches are no longer enough. What defines critical data? How do organizations ensure SaaS data remains secure, compliant, and recoverable amid rising cyberthreats, regulatory pressures, and evolving business needs? 

Hear from guest speaker Heidi Shey, Principal Analyst at Forrester Research, as she breaks down the key components of a data-centric security strategy for SaaS environments.  

This session will explore: 

How to define which data you need to protect 

How to mitigate the risk behind threats and data loss scenarios unique to SaaS  

What to consider in the selection and management of data security capabilities and controls 

 
A modern data protection strategy must be resilient, secure, and designed for the complexities of SaaS environments. Learn how to shift from a reactive approach to a proactive, security-first mindset, ensuring your data remains immutable, accessible, and always recoverable.

The SaaS data security imperative: Understanding risks, mitigating threats, and ensuring resilience

Resiliency

Disaster Recovery

Security

Cloud Adoption

IT Architecture

Enterprise Cloud

Enterprise Architecture

Cloud Backup

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

The SaaS data security imperative: Understanding risks, mitigating threats, and ensuring resilience

Presented by

About this talk

Keepit