Today’s hybrid work environments and widespread use of cloud-based technologies have given cybercriminals new attack vectors, and it’s challenging for enterprise security teams to keep up. Addressing this challenge requires two shifts in approach. The first shift is accepting that cyberattacks are increasingly a matter of when not if. The second shift is a move towards a Zero Trust framework for Microsoft 365 environments. Companies must have logically air-gapped backups of their Microsoft 365 data, so they can regain operations and never pay a ransom.