Data Protection
Data Protection
Data Protection
Trends Report
2024
Insights 2
Introduction
INTRODUCTION
In late 2023, an independent research firm surveyed 1,200 IT leaders and implementers on a wide range
of their data protection challenges and strategies. This is the fifth annual release of the Data Protection
Trends report in its current methodology* to quantify the challenges and drivers of the data protection
industry, always using analyst and research firms to garner an impartial understanding of how data
protection must continue to evolve.
2024 is starting off with IT teams having an interest in changing solutions and their own roles, which 1.0
will either radically improve their cyber preparedness and compliance postures or further widen
the expectations between what business units are expecting and what IT is able to deliver.
MACRO TRENDS
Figure 2 — 2024 could also be a year for changing roles
Aside from organizational and methods changes, the primary drivers of change and what organizations
are looking for remains consistent in 2024, with the reactive pressures against ransomware and
the proactive initiatives of embracing and protecting cloud-hosted workloads.
Figure 3 — Reliable protection of IaaS & SaaS are enterprises’ priorities 2.0
CLOUD CONSIDERATIONS
Figure 5 — ‘Modern’ in 2024 must be cyber-integrated and hybrid-flexible
Figure 6 — 74% of organizations protect their Microsoft 365 data
Figure 7 — Containers are everywhere, but their backups are scattered
Unsurprisingly, 2024 will be another year where most data protection strategies will be fundamentally
designed around preparing organizations against ransomware and other large IT interruption at scale.
Figure 8 — Get your data out of the building 3.0
https://vee.am/DPR24 Data Protection Trends 2024 Report — published by Veeam in January 2024
N=1,200 unbiased IT Leaders and Implementers responsible for their organizations’ data protection strategies.
Insights 3
INTRODUCTION
For the second year in a row, over half of organizations anticipate changing their primary backup
solution. It is notable that while the intent to change remains high and consistent (54% for 2024
vs 57% for 2023), there is a growing percentage of those remaining with the status quo (8% not
intending to change in 2023 vs. 27% in 2024). It is worth noting that one could consider changing
from a self-managed solution to managed service (offering the same backup software), as well as
changing technologies or vendors. In any case, it will be another year of change. Perhaps this is
1.0
not surprising considering:
85% of organizations recognize an ‘Availability Gap’ between how fast they could recover versus
what the business processes require. 76% of organizations recognize a ‘Protection Gap’ between
how much data they could afford to lose and how often their data is protected.
MACRO TRENDS
Also consistent is the expectation to grow data protection budgets, with 2024 spending expected
to be 6.6% higher than the previous fiscal year. This is especially impressive since Gartner revised
its overall 2023 spending down from 5.5% to 4.3% growth while IDC is expecting 5.4% growth in
data replication and protection software. Meaning that this survey reveals that backup spending
is exceeding the expectations of the major industry analyst firms. In fact, 92% of organizations
2.0
intend to increase their data protection budgets for 2024, which is up from the 85% who planned
to increase in 2023.
CLOUD CONSIDERATIONS
11% 17%
We definitely will not We definitely will
16% Figure 1
3.0
Very unlikely
13% 37%
Somewhat likely Very likely
CLOSING
https://www.gartner.com/document/4714599
https://www.idc.com/getdoc.jsp?containerId=US51037523
https://vee.am/DPR24 Data Protection Trends 2024 Report — published by Veeam in January 2024
N=1,200 unbiased IT Leaders and Implementers responsible for their organizations’ data protection strategies.
Insights 4
INTRODUCTION
New to the survey for 2024 was the discovery that nearly half (47%) of IT leaders and implementers
for data protection intend to seek a new job outside of their current organization. In contrast, only
1 in 3 intend to remain in role/org and another 1 in 5 are undecided. Perhaps this is less surprising
when considering that the top five concerns (in order) that respondents had were:
• Lack of new skills or learning opportunities
• Inability to influence strategic direction 1.0
MACRO TRENDS
Other than cyberattacks/disasters, the four other concerns are ‘solvable’ by simply enhanced
leadership support.
This market shift is both a challenge and an opportunity:
• It is incumbent on senior leadership to retain their existing data protection talent, to ensure their
preparedness for cyber resiliency and other disaster preparation. Losing those experts puts 2.0
CLOUD CONSIDERATIONS
• There is a strong opportunity to recruit data protection talent that may bring new skills in ensuring
the hardening of data protection against cyber criminals, as well as new knowledge to protect
modern production workloads that reside in clouds, such as Microsoft 365, Kubernetes containers,
or other IaaS/PaaS architectures
One established way that organizations are choosing to de-risk their exposure against labor or skill
shortages is by engaging managed BaaS or DRaaS providers that ensure deep solution knowledge,
operational monitoring, and primary technical support.
3.0
16% 16%
Definitely will not Definitely will CYBER & OTHER DISASTERS
Figure 2
17% 33%
Remain
47%
Intend
How likely is it that you will
seek a new job outside of your
Very unlikely to change current organization within
the next twelve months?
19%
Undecided
8% 31%
Somewhat unlikely Very likely
12%
CLOSING
Somewhat likely
https://vee.am/DPR24 Data Protection Trends 2024 Report — published by Veeam in January 2024
N=1,200 unbiased IT Leaders and Implementers responsible for their organizations’ data protection strategies.
Insights 5
INTRODUCTION
For the second year in a row, the two most important attributes sought in an ‘enterprise backup’ solution
are reliability and the protection of cloud-hosted workloads (IaaS & SaaS). That said, the most common
attributes being sought are the typical synonyms of ‘enterprise’ in manageability across locations
and compliance/governance.
It is not a surprise that (improving) reliability and (better) protection of IaaS/SaaS are not only top of 1.0
mind but adjacent in the list, since it is well understood that using legacy backup methods to protect
modern workloads often results in unreliable or incomplete backups, thereby being unable to restore.
It is notable that enterprise application (e.g. Oracle/SAP) and datacenter platform (e.g. UNIX or NAS)
scored low in the list due to having been addressed as ‘table stakes’ by any backup solution, even those
MACRO TRENDS
legacy offerings that have been datacenter-centric for decades. That said, datacenter workloads are
not diminishing at the same rate that cloud-hosted workloads are spinning up. In 2024:
• 28% run on physical servers within datacenters
• 27% run within virtual machines within datacenters
2.0
• 45% run as server instances within cloud-hosts
CLOUD CONSIDERATIONS
Consistently reliable 36%
Figure 3 17%
https://vee.am/DPR24 Data Protection Trends 2024 Report — published by Veeam in January 2024
N=1,200 unbiased IT Leaders and Implementers responsible for their organizations’ data protection strategies.
Insights 6
INTRODUCTION
For the past five years, improving reliability/success of backups has been one of the top two drivers
for changing backup solutions, usually in the undeniable top spot like this year.
That said, the other top driver has changed over the years from qualitative improvement (RPO/RTO)
to economic improvement (TCO/ROI), but more recently as well as this year — in preparation against
ransomware. While one could argue that ensuring the ability to restore (by improving the reliability 1.0
backups) is also inherently in response to cyber resiliency initiatives, respondents are also explicitly
changing their primary backup solution in order to gain better integration with detection/remediation
capabilities, as well as more hardened or secure repositories — e.g. immutability.
MACRO TRENDS
It is also notable that while economics is always part of any IT modernization conversation, sentiment
around ROI/TCO as well as reducing actual costs were both among the least deterministic drivers of
change; implying that saving money without improving capabilities is moot in the current threat landscape.
2.0
Improve reliability/success of backups 36%
15%
Figure 4
CLOUD CONSIDERATIONS
Enhanced detection/remediation 31%
capabilities for cyber or ransomware 9% Which of the following would
drive your organization to change
Diversify and use different data 30% its primary backup solution to
protection tools for different workloads 8%
a new solution or service?
Deploy data protection as software- 29%
only (on hardware of choice) 8%
https://vee.am/DPR24 Data Protection Trends 2024 Report — published by Veeam in January 2024
N=1,200 unbiased IT Leaders and Implementers responsible for their organizations’ data protection strategies.
Insights 7
INTRODUCTION
For the past few years, two macro themes of what does ‘modern’ or ‘innovative’ data protection mean,
including integration between data protection and cybersecurity tools, as well being able to provide
protection across myriad cloud scenarios. For the second year in a row, the most common and most
important aspect of a modern data protection solution is one that integrates with cybersecurity tools,
presumably across a range of capabilities from detection through remediation. It is notable that 1.0
2 out of 5 (41%) consider some aspect of mobility in cloud scenarios as most important characteristic
of a modern solution, including:
• The ability to move a workload from one cloud to another, e.g. developed in Amazon, moved
to Azure to utilize usage credits
MACRO TRENDS
• Standardization of protection between on-prem workloads and IaaS/SaaS, presumably again due
to datasets needing to move based on business mandates (as well as technical considerations) but
not wanting protection policies or assured recovery to suffer as a result
• It is notable that migrating a workload from on-premises to a cloud and the ability to disaster recovery
to a cloud host are also both in the top ten since the mechanics of transforming an on-prem server 2.0
(physical or virtual) into a cloud-hosted instance is nearly identical between the two initiatives. Said
CLOUD CONSIDERATIONS
another way, a migration is simply a disaster that you can schedule
https://vee.am/DPR24 Data Protection Trends 2024 Report — published by Veeam in January 2024
N=1,200 unbiased IT Leaders and Implementers responsible for their organizations’ data protection strategies.
Insights 8
74% of Organizations
Protect Their Microsoft 365 Data
INTRODUCTION
As with most mainstream production platforms in their early years, workload owners often underestimate
the need for purpose-built backup solutions, especially in regard to cloud-hosted platforms.
• In 20201, 69% relied solely on the built-in recycle bin or utility,
while only 27% backed up their Microsoft 365 data
1.0
• In 20222, 47% relied solely on the recycle bin or built-in functionality,
while 45% backed up their Microsoft 365 data
• In 2024, only 3% rely on the recycle bin, while 41% utilize ‘legal hold’ within
enhanced M365 tiers and 74% back up their Microsoft 365 data
MACRO TRENDS
Thankfully, only 4% still incorrectly assume that because Microsoft 365 is natively resilient, it does not
require backups. That is contrary to Microsoft’s published guidance on their Shared Responsibility
Model and in fact, Microsoft announced it is developing a backup utility to do backups of M365 for
organizations whose primary back up solution may be insufficient.
2.0
CLOUD CONSIDERATIONS
We back up using third-party backup
product or BaaS service 74%
Figure 6
We utilize enhanced tiers/services Does your organization back up
of Microsoft 365 — e.g. “Legal 41%
Hold” in E3/E5 the data from within Microsoft
Office 365?
We do not currently back up Microsoft 4%
365, but are looking for a solution
CLOSING
1
2020 Data Protection Trends Report (n=1,550), June 2020
² 2022 Data Protection Trends Report (n=3,400), February 2022
https://vee.am/DPR24 Data Protection Trends 2024 Report — published by Veeam in January 2024
N=1,200 unbiased IT Leaders and Implementers responsible for their organizations’ data protection strategies.
Insights 9
INTRODUCTION
For the third year in a row, 52%+ of organizations stated that they are running containers in production
with another 35%+ in planning/deployment phases, equating to 90%+ each of the three years surveyed.
But only 25% protect their containers deployments with a tool that is purpose-built solution.
The unfortunate and dangerous reality is that most administrators only back up the underlying storage
1.0
or the database components, with the presumption that they’ll be able to reconstruct the rest of
the platform on their own.
• Imagine if you only backed up the storage under your hypervisor host?
• Imagine if you only backed up the database from your web application?
MACRO TRENDS
This is less surprising when you learn that the role responsible for backing up containers varies widely
across organizations, with nearly even distribution between database admins (27%), storage admins
(24%), backup admins (21%), and Kubernetes admins (29%). Even over the three years surveyed, there
has been only minor variation between these roles, with slightly fewer storage admins being involved
and slightly more Kubernetes admins taking lead. 2.0
CLOUD CONSIDERATIONS
3%
There is no stateful data, so we
do not back up our containers
25%
We back up using a third-party Figure 7 3.0
backup tool for containers
How does your organization
26% 45%
We back up the underlying We back up the storage
database components that the data resides in
CLOSING
https://vee.am/DPR24 Data Protection Trends 2024 Report — published by Veeam in January 2024
N=1,200 unbiased IT Leaders and Implementers responsible for their organizations’ data protection strategies.
Insights 10
INTRODUCTION
While disk-based backups within the same locale as the production data remains the most agile way
to restore, there continues to be massive interest in complementing those disk repositories with tapes
and/or cloud repositories in 2024:
• 52% of production data is also backed up to tapes
• 61% of production data is also backed up to clouds
1.0
Of the 1,200 organizations, only 4 respondents did not use tape somewhere in their data protection
strategy and not one claimed to not use cloud repositories. Elsewhere in the survey, 88% were either
very likely or almost certain to use a Backup as-a-Service (BaaS) or Disaster Recovery as-a-Service
(DRaaS) for at least some of their production servers. One of the most impressive trends over the past
five years has been the increase in BC/DR readiness, in large part due to leveraging cloud-based
MACRO TRENDS
infrastructure in lieu of a secondary physical data center or traditional hotsite:
• From 2020 through 2026, roughly 28% (+/- 2%) maintain secondary datacenters
with disaster recovery capabilities
• In 2020, 23% utilized cloud-hosted infrastructure as their DR site, with that
2.0
expected to double to 47% by 2026
It is exciting to see that while only half (52%) of organizations had a BC/DR capability in 2020, three-
CLOUD CONSIDERATIONS
fourths (74%) will by 2026. It is notable that for many organizations, their ability to be DR or cyber
prepared are not just because of an agile or more affordable cloud site, but also the expertise that
comes from managed service providers.
2025
Anticipated’23 25% 42% 67%
2026
Anticipated’24 26% 47% 74%
CLOSING
https://vee.am/DPR24 Data Protection Trends 2024 Report — published by Veeam in January 2024
N=1,200 unbiased IT Leaders and Implementers responsible for their organizations’ data protection strategies.
Insights 11
INTRODUCTION
In a world of “need to’s” (compliance) and “want to’s” (modernization), some interesting trends are occurring:
When asked about hindrances to Digital Transformation (DX), near the top of the list were:
• Environmental sustainability, social, and governance (ESG)
• Skills shortage to implement technology 1.0
• Economic uncertainty
When asked about compliance and governance initiatives, near the top of the list were:
• Long-term data retention
MACRO TRENDS
• Regulatory mandates related to data
• Data geographic sovereignty
Unfortunately, those were #2, #3, and #4:
• The top corporate initiative for 2024 is cyber education related to phishing 2.0
CLOUD CONSIDERATIONS
Quite literally, organizations cannot invest where they want or need to, because of their efforts
to protect themselves via cyber villains.
Organizational leadership
is unsure/unsupportive of 20%
digital transformation
Meeting changing
customer needs 17%
https://vee.am/DPR24 Data Protection Trends 2024 Report — published by Veeam in January 2024
N=1,200 unbiased IT Leaders and Implementers responsible for their organizations’ data protection strategies.
Insights 12
INTRODUCTION
37% of servers had at least one unexpected outage in 2023 — but why?
For the fourth year in a row, a cyberattack was the cause of the most impactful outage. That said,
with many of the historical causes continue to plague IT — which is why backup is as relevant as ever:
• Infrastructure outages, which has the added risk of being affected by bad actors to prevent you from 1.0
reaching your distributed or cloud-hosted workloads. They don’t have to take down those platforms,
just deny your ability to reach them
• Storage hardware failures and application software issues have been around as long as computing,
due to having the lowest time to failure and most frequently/precariously maintained layer, respectively
MACRO TRENDS
• It is worth nothing that rounding out the top five is outages in public cloud resources; thereby
validating that cloud services do go down and that running your application in a cloud host does
not guarantee uptime — i.e. backup and Cyber/BC/DR still matter for clouds
New to the survey question this year was natural disasters (fire/flood/hurricane/etc). Though it was
thankfully among the least frequent of occurrences, still 1 in 4 organizations experienced a natural 2.0
event. So, while they may not occur as often, it would be prudent to not dismiss what we as an industry
have always considered a doomsday scenario.
CLOUD CONSIDERATIONS
40%
Cybersecurity event 18%
16% Figure 10
15%
37% Over the past two years, what
Infrastructure/ 10% were the most common causes
networking outage 12%
14% of the outages that your
35% organization experienced?
Storage hardware outage 10% Which was the most impactful
8% 3.0
8% in 2021, 2022, and 2023?
34%
https://vee.am/DPR24 Data Protection Trends 2024 Report — published by Veeam in January 2024
N=1,200 unbiased IT Leaders and Implementers responsible for their organizations’ data protection strategies.
Insights 13
INTRODUCTION
In validation to the concerns and high mindfulness of cyber preparedness seen earlier in this research,
it is unfortunate that 3 out of 4 organizations suffered at least one ransomware attack in the preceding
twelve months. When looking at the boundaries of this question:
• 25% stated that they were not attacked, which should be noted with caution since many security
firms warn that the attacker can be lurking in your environment for 60 to 200 days prior to incurring
damage or asking for the ransom. If true, then a high percentage of those respondents may simply 1.0
have not discovered the breach yet
• 26% stated that they were attacked four or more times in the past year
Yes, more organizations were hit quarterly than believe not at all.
MACRO TRENDS
For more information on what happens during and after a cyberattack,
please check out the 2023 Ransomware Trends Report, which summarizes
1,200 organizations that were breached in the preceding twelve months and
the lessons learned from the nearly 3,000 attacks that they experienced.
2.0
CLOUD CONSIDERATIONS
None 25%
Figure 11
How many ransomware attacks One 16%
has your organization suffered
in the last 12 months?
Two 18%
3.0
Three 16%
Five 9%
Six 3%
https://vee.am/DPR24 Data Protection Trends 2024 Report — published by Veeam in January 2024
N=1,200 unbiased IT Leaders and Implementers responsible for their organizations’ data protection strategies.
Insights 14
INTRODUCTION
Imagine a relatively small disaster of part of a datacenter (a few racks) or a ransomware breach that
was caught relatively early — with 50 servers being affected. Unfortunately, only 32% believe they could
recover that relatively small server stack in a business week. Now imagine how your business processes
would be affected without being able to access your data for that week or more.
1.0
Several supporting statistics from the research paint a grim picture:
• When asked about their last large-scale server recovery test, only 58% met their recovery SLA’s.
As a DR planner, that’s good news in that you now know what to look for to fix the other 42%. For
anyone else in the company, it should set your expectations that 2 out of 5 servers won’t be there
MACRO TRENDS
when you need them
• When asked about testing and documentation update frequency, organizations only test or update
every 7.3 months, which is notably worse than the 4.4 month averages just two years ago
• Why do organizations test less and fail their SLAs? Because without orchestrated recovery processes,
manual resumption is difficult, time-consuming, and prone to errors. Unfortunately, only 13% have 2.0
orchestrated workflows as part of their failover/failback processes
CLOUD CONSIDERATIONS
1%
Less than 1 day
5% 3%
15 to 28 days 1 day
27% 15%
3.0
36%
CLOSING
6 to 7 days
https://vee.am/DPR24 Data Protection Trends 2024 Report — published by Veeam in January 2024
N=1,200 unbiased IT Leaders and Implementers responsible for their organizations’ data protection strategies.
Insights 15
Summary
INTRODUCTION
This analysis covers the opinions of 1,200 unbiased organizations on a variety of data protection trends,
with the most notable insights being:
• Reliability and consistency (of protecting IaaS and SaaS alongside datacenter servers) are the key
drivers for improving data protection in 2024. For organizations that are struggling to protect cloud-
hosted data with legacy backup solutions, it is likely they will supplement their data center backup
solution with IaaS/PaaS and/or SaaS capabilities 1.0
• Ransomware is both the most common and most impactful cause of outages, but it would be
irresponsible to over rotate your data protection solution to be singularly focused on cyber
preparedness, because other disasters (fire, flood, etc.) and user errors (overwrites, deletion, etc.)
still occur. That said, ensuring your data recovery tools can integrate with other cyber detection
MACRO TRENDS
and remediation technologies is paramount for comprehensive cyber resilience
• Cloud-based services seem nearly inevitable for organizations of all sizes. But similar to how there
isn’t just one type of production cloud, there isn’t just one protection cloud scenario. Organizations
should consider cloud tiers for retention, Backup as a Service (BaaS), and ultimately Disaster
Recovery as a Service (DRaaS) 2.0
CLOUD CONSIDERATIONS
About the research
Veeam has commissioned analysts or research firms 8 times over 10 years to produce an industry
report on the evolving data protection landscape; for the purposes of affecting its product strategy
as well as helping the market be better informed. 3.0
Since 2019, consistent sources of panels and the data analysis by analysts formerly at Gartner and
Data chart reuse — You are welcome to reuse the data, charts and text published in this report under the terms of
the Creative Commons Attribution 4.0 International License. You are free to share and make commercial use of this
CLOSING
work if you attribute the source as the Veeam Data Protection Trends 2024 Report. Please download all charts here.
https://vee.am/DPR24 Data Protection Trends 2024 Report — published by Veeam in January 2024
N=1,200 unbiased IT Leaders and Implementers responsible for their organizations’ data protection strategies.
Insights 16
INTRODUCTION
Veeam®, the #1 global market leader in data protection and ransomware recovery,
is on a mission to empower every organization to not just bounce back from
a data outage or loss but bounce forward. With Veeam, organizations achieve
radical resilience through data security, data recovery, and data freedom for their
hybrid cloud. The Veeam Data Platform delivers a single solution for cloud, virtual,
physical, SaaS, and Kubernetes environments that gives IT and security leaders 1.0
peace of mind that their apps and data are protected and always available.
Headquartered in Columbus, Ohio, with offices in more than 30 countries, Veeam
protects over 450,000 customers worldwide, including 73% of the Global
2000, who trust Veeam to keep their businesses running. Radical resilience
MACRO TRENDS
starts with Veeam. Learn more at www.veeam.com or follow Veeam on LinkedIn
@Veeam-Software and X @Veeam.
2.0
CLOUD CONSIDERATIONS
Jason Buffington Dave Russell Julie Webb 3.0
VP, Market Strategy VP, Enterprise Strategy Director, Market
CLOSING
https://vee.am/DPR24 Data Protection Trends 2024 Report — published by Veeam in January 2024
N=1,200 unbiased IT Leaders and Implementers responsible for their organizations’ data protection strategies.