In this blog
On Thursday, November 12 a massive Microsoft 365 outage disrupted the daily work of hundreds of thousands of Exchange, Outlook, Sharepoint, Copilot and Defender users.
A day later, many services were recovering from what Microsoft reported was elevated infrastructure load across several regions. But for millions of employees who use Microsoft 365 every day, this outage meant more than 12 hours without email, calendars and meetings.
It was a reminder that every business needs a plan to deal with inevitable outages.
Microsoft Outlook connects us with customers. Teams keeps colleagues collaborating. SharePoint and OneDrive make critical information accessible. Microsoft Entra ID helps people securely access the applications they need. When any of these services experiences an interruption, the impact can quickly extend beyond IT. Airline customer support came to a halt. Government agencies in Australia, Japan, and the US struggled to communicate. Some organizations even had to dust off their fax machines to circulate documents.
The Microsoft 365 service disruption is a timely reminder of just how essential cloud productivity platforms have become. It also raises an important question every organization should contend with: How prepared are we to keep our business moving when critical services become unavailable?
First, Focus on the Immediate Needs of the Business
During a service disruption, the priority is straightforward: support employees and customers while affected services are restored.
IT teams and service providers work hard behind the scenes to diagnose issues, coordinate recovery, and communicate updates. Organizations can support those efforts by having a clear business continuity plan. That means knowing:
How employees will communicate when their primary email or collaboration tools are unavailable.
Which business processes are most critical and require alternative operating procedures.
Who makes decisions during an incident, including IT, Security, Operations, and business leaders.
How customers and partners receive updates when normal communications are disrupted.
Where to find authoritative service information, including updates from Microsoft and relevant service providers.
These are practical steps that every organization can plan and rehearse in advance.
Think Beyond Individual Applications—Think Minimum Viable Business
One of the most useful exercises organizations can undertake to address the immediate need of the business is to define their Minimum Viable Business (MVB). This means identifying the people, applications, data, identity systems, and processes required to maintain essential operations during a disruption.
For many enterprises, Microsoft 365 and identity infrastructure belong squarely in that conversation.
A practical MVB assessment should answer five questions:
What must keep running? Identify the critical business processes that depend on email, collaboration, documents, and identity services.
What happens when those services are unavailable? Document dependencies and alternative operating procedures, including communication methods that do not rely on the affected service.
Can we recover our critical data? Understand how Microsoft 365 information is protected against deletion, corruption, and malicious activity. Validate recovery options and recovery-time objectives.
Can we restore trusted access? Evaluate the resilience of identity infrastructure, including Microsoft Entra ID and Active Directory. Understand how users, permissions, and critical configurations can be recovered after an identity incident.
Have we actually tested the plan? Run tabletop exercises and recovery tests involving IT, Security, and business stakeholders.
The best time to discover a gap in a recovery plan is during an exercise, with the entire team prepared to address it.
Service Availability is One Part of the Resilience Equation
The service disruption also presents an opportunity to examine a broader dimension of resilience.
Microsoft invests extensively in the availability, security, and reliability of its cloud services. But enterprise customers must also invest some effort to prepare their own environments for these incidents. Consider three scenarios:
A cloud service becomes temporarily unavailable: During a provider-side outage, the provider is responsible for restoring its infrastructure and services. A third-party backup cannot restore an unavailable Microsoft-operated service, so customers need continuity procedures, alternative communication channels, and operational plans to maintain operations during the affected period.
Critical Microsoft 365 data is deleted, corrupted, or compromised: Accidental deletion, malicious activity, and cyberattacks each create their own recovery challenges. For each incident type, organizations need to understand which information is protected, what recovery options are available, and how quickly critical business data can be restored. Independent data protection and tested recovery procedures are essential parts of any resilience strategy that can successfully address a variety of outages. Rubrik Microsoft 365 can close critical resilience gaps and secure data, identity, posture, and AI agents with autonomous business recovery.
Identity systems are compromised or need recovery: A complete recovery strategy must account for both the information a business depends on and the trusted access required to use it.Microsoft Entra ID and Active Directory help determine who can access applications, data, and services. If identities, permissions, or critical configurations are compromised, restoring data alone may leave users unable to access the systems they need. Solutions like Rubrik Identity Resilience for Entra ID and Active Directory can help organizations prepare the right response for each type of incident.
Building Resilience Together
Business resilience requires coordination across service providers, technology teams, and the business itself. To that end, Rubrik works closely with Microsoft to help organizations strengthen cyber resilience across their critical environments.
Rubrik’s Microsoft 365 data protection capabilities help customers protect and recover business-critical information following incidents such as deletion, corruption, or cyberattacks.
Rubrik Identity Resilience extends that strategy to identity environments, helping organizations protect and recover critical identity data and configurations across Microsoft Entra ID, Active Directory, and other supported identity providers.
Together, these capabilities can support a broader business recovery strategy that addresses both data and trusted access. They complement the availability and security capabilities Microsoft provides, helping customers prepare for the recovery scenarios under their responsibility.
Today’s Outage is the Catalyst for Tomorrow’s Readiness
Service disruptions are challenging for everyone involved, especially the customers and IT professionals working to keep businesses operating.
But they also provide a valuable opportunity to review preparedness.
Now is a good time to revisit business continuity plans, identify critical dependencies, validate recovery objectives, and conduct recovery exercises. Start with the applications your employees use every day. Include the data and identity systems that make those applications useful. Make sure your recovery strategy reflects the way your business actually operates.
The goal is simple: Whatever the disruption, your organization should know what matters most, who is responsible, and how to move forward.
Join us at Microsoft Ignite
Meet the Rubrik team at Booth #1159, catch our theatre session, Build cyber resilience at AI speed (Wednesday, November 18, 10:45 AM, THRSP1079), or watch our on-demand digital session, Your apps are down. What comes back first?. However you join us, we’ll talk through Microsoft 365 resilience, help you assess recovery-time requirements, and show you where data and identity recovery fit into your Minimum Viable Business strategy. Not attending Ignite? Sign up for a Microsoft 365 recovery assessment and get the same conversation with our team.
We look forward to helping you build greater confidence in your organization’s recovery readiness.