The Leader in Cloud Data Protection and Information Management Druva Briefing For Cbus Data Connectors Conference L.J. Manning - Bob Pawloski

Increasing Data & Business Risks 40 Exabyte Corruption & Loss Ransomware & Malware Insider Threat & IP Theft 50% Enterprise data will be exclusively on endpoints & cloud by 2020 Legal Exposure & Sanctions Compliance Infractions Today’s data landscape has become increasingly complex, not by the shear volume of data growth, but also by the # of places it’s being stored to keep the business agile Server environments have become more distributed across sites with cloud increasingly becoming a migration target, and end-users are using more devices and cloud application services With this increase of dispersion and fragmentation organizations are under greater pressure to ensure proper protection and visibility to the data as the responsibilities and liabilities haven’t changed Organizations must not only protect the data, but also understand what it is, where it is, and who has it to align to company data policies and industry regulations

Enterprise Customers 4,000+ Data Under Management 25PB+ We now efficiently manage the full lifecycle of data across time, device and geography. Druva makes this possible. “ ” Amazon Storage Partner Top 5 In Cloud Data Protection Gartner #1 Shah Nawaz, Director of IT, Shire * This is where Druva comes in, a unified cloud platform that enables organizations to not only protect their fragmented data for recoverability, but also to gain better understanding of their information to address the bigger challenges facing business today – be that compliance, data loss, data theft, privacy or legal requests. * Today Druva has over 4,000 customers utilizing our solution to address their data challenges, many of these companies are large, well known enterprises often dealing with data into the 100s of Terabytes. * We've also been acknowledged by Gartner three years in a row as the leading vendor in cloud data protection.

Druva: A Unified Cloud Platform Secure and Scalable Cloud Platform Multiple Data Protection Services Efficient Cloud Backup Make this a build slide: Left section, connectors and cloud section, workloads section This will tie in well to slide #3 – could even do a transition graphic from legacy to modern/cloud

Why Protect Cloud Data? 44% of cloud malware contained ransomware Malware in email 44% of cloud malware contained ransomware 56% of malware-infected files are easily shared Malware spreads User puts file in cloud app Data Corruption Malicious Activity User Actions 3rd Party SW errors Sync errors Migration errors Upset employee Insider threats / Hacks Virus attacks / Ransomware Accidental deletion Document overwrite Departing employee

Cloud Provider Doesn’t Cover All Forms of Data Loss High Availability ≠ Backup Cloud is a Shared Responsibility “Some IT organizations wrongly assume that high-availability and disaster recovery capabilities offered by SaaS providers can recover data loss by users errors or malicious attacks” You are responsible for protecting your data from user errors or malicious behavior Microsoft is responsible for the cloud infrastructure, network controls, application, etc. Source: Gartner Research: Data Backup/ Recovery Factors to Consider When Adopting SaaS

Cloud Application Data Protection Cloud-to-cloud backup (API Connectors) No impact to network bandwidth Easy access and quick recovery of data Accidental deletion or malware attacks Data archival for along as it is needed Compliance or litigation Exiting employees

Traditional vs Cloud eDiscovery Weeks Reactive Collection Multi-Tool Interim Storage Export & Ship Ingest / Process Analyze / Review Proactive Collection Processing EDA Cloud to Cloud Ingest / Review Hours

eDiscovery and Legal Hold (Data Preservation) Easily manage and place legal holds Litigation support dashboard Select custodians, create legal holds Capture forensic metadata Extended set of EDRM defined attributes Ensure legal admissibility File signatures Chain of custody reporting Auditing of users & admins Data ingestion to eDiscovery platforms Secure WebDAV data access Download utility

Proactive Compliance Management Automates compliance monitoring and reporting for sensitive and regulated information Full-text indexing across endpoints and cloud Built-in support for common regulatory policies (HIPAA, GLBA, FCRA / FACTA, PCI-DSS, SSN, …) Customizable templates to search using keywords and regular expressions

Fail Proof Ransomware Protection Detect Ransomware via unusual data activity Get notified for impacted snapshots Know last best known snapshot for recovery Protection against ransomware Regular time-indexed snapshot backups Flexibility in backup frequency Incorporate endpoint and cloud app data Offsite data storage (AWS/Microsoft Azure) Recovering from ransomware intrusion 24/7 data access User/admin restore Locate suspicious files quickly on endpoints and cloud apps Ransomware: Detect, Protect and Recover Backup Trend Last 100 snapshot trend You Can’t Prevent Ransomware Attacks, But You Can Protect Against It

Improve Business Agility, Reduce Risk & Cost Single Pane of Glass Global Deployment, Consistent SLAs Reduced Infrastructure Dependency Lower Overall TCO

Druva: Under the Hood Savings Performance Scale Auto Storage Tiering Longer Retention, lower cost Patented Global Dedupe 80% storage & bandwidth Saving Savings WAN Optimized High Speed Data Transfers 600Mbps Performance Intelligent Caching Accelerated Storage & Retrieval Time Indexed Metadata High Elasticity Indexing & Database Storage: 31+ Global Regions Durability, reach and regional Compliance Scale * Swap S3/S3IA w/ Hot, Warm, * Speed / Cost / Flexibility / Security

L.J. Manning - Druva - lj.manning@druva.com Thank You L.J. Manning - Druva - lj.manning@druva.com

Architecture: Public Cloud Native 30+ Selectable Storage Regions Architecture: Public Cloud Native ITAR FIPS 140-2 MPAA ISO 27001 SOC 1,2,3 ISAE 3402 PCI DSS HIPAA FISMA Moderate Elastic Scale, Global Reach SLA Guarantees, High Performance Single Data Store, Multiple Workloads Advanced Cloud Security & Privacy Remove Cloud tech Native vs. Managed/IaaS– Co. Lo. he key to Druva’s difference is the ability to store and index extremely large amounts of data. The design takes advantage of the full the elasticity of the cloud for scale, access and infinite storage. We deploy our cloud solution on AWS because it’s the most secure and highest rated cloud infrastructure in the world with 11 availability zones containing multiple data center. <<BUILD>> Distributed Cloud File System Object storage for scale, durability and performance Metadata separation for multi-purpose workloads Global Dedupe on the Cloud Intelligent, source-side global de-duplication results in 5x faster backups WAN-optimized data transfers for efficiency on any network Enterprise SLAs 99.5% uptime and 99.999999999% data durability

Fail Proof Ransomware Protection Detect Ransomware via unusual data activity Get notified for impacted snapshots Know last best known snapshot for recovery Protection against ransomware Regular time-indexed snapshot backups Flexibility in backup frequency Incorporate endpoint and cloud app data Offsite data storage (AWS/Microsoft Azure) Recovering from ransomware intrusion 24/7 data access User/admin restore Locate suspicious files quickly on endpoints and cloud apps Ransomware: Detect, Protect and Recover Backup Trend Last 100 snapshot trend You Can’t Prevent Ransomware Attacks, But You Can Protect Against It

Unusual Data Activity – Abnormal Snapshot

Challenges Of O365 - Data Retention Cloud Solutions Not Natively Designed for Data Restoration Limited or no time indexed snapshots or backups performed (outside recycle Bin that is purged after fix period of time). Once Data is Deleted, Altered or Corrupted weather Accidental or Intentional - little recourse to recover it. Ransomware or Malware recovery is a challenge without Time Indexed Snap Shots. If Cloud provider provides capabilities = Expensive

Challenges of O365 - Data Retention (continued) Data Governance Limitations: Cumbersome and complex to identify, isolate, and search data relevant for litigation. Information should be collected, indexed & have capability to be ‘searched’. Summary Gaps Include: Backup, Business Continuity, Ransomeware Recovery, Advanced Detection, and Legal Hold/e-Discovery Gartner “strongly” recommends organizations with O365 consider third party offering to address the Gaps.

End User Data Protection & Management Backup & Recovery Enables legal teams to manage holds for eDiscovery Legal Hold / eDiscovery Compliance Monitoring Ensures sensitive data (PHI, PII) is properly identified and managed Ensures business continuity for 20,000 global employee and consultants Infrastructure Data Protection & Workload Mobility ROBO Business Continuity Ensures business continuity for over 100 remote sites Consolidate small DC backups across Asia, & migration to cloud Cloud - Workload Mobility Securely manage and backup AWS EC2 data to other region Backup AWS Data

Druva inSync Data Governance Enablement Unique end-user data reach via integrated platform Endpoints Cloud Applications Automated data collection Frequent Meets legal forensic requirements Preservation in place Store, protect and maintain chain of custody Ensure immutability ✔ Collect ✔ Preserve Druva reduces the cost in collection and preservation of data while minimizing data spoliation

The eDiscovery Process Data ingestion into 3rd Party eDiscovery Tool REVIEW ANALYSIS PRODUCTION PRESENTATION PROCESSING PRESERVATION PRESERVATION INFORMATION GOVERNANCE IDENTIFICATION COLLECTION