A Forrester Total Economic Impact™ Study Commissioned By Druva, July 2024
Businesses face increasingly complex data resilience challenges as security threats multiply across more data sources, regulations proliferate, and the expectations from customers become more demanding. Modern data security solutions need to create an immutable copy of data, enable security teams to leverage multiple sources of information to enhance detection and response, and help companies to comply with new laws. With enterprise data living across data centers, clouds, endpoints and SaaS Apps, organizations require significant automation and AI to respond to data and security problems faster and more accurately.
Druva makes secure data backup and recovery autonomous with a 100% SaaS, fully managed platform to secure and recover data from all threats. Druva’s comprehensive approach leverages real-time insights, powered by its Data Security Cloud, to constantly improve security posture and provide customers with autonomous protection, rapid threat response, and guaranteed data recovery. The company defends business data in today’s ever-connected world.
Druva commissioned Forrester Consulting to conduct a Total Economic Impact™ (TEI) study and examine the potential return on investment (ROI) enterprises may realize by deploying Data Security Cloud.1 The purpose of this study is to provide readers with a framework to evaluate the potential financial impact of Data Security Cloud on their organizations.
To better understand the benefits, costs, and risks associated with this investment, Forrester interviewed four representatives with experience using Data Security Cloud. For the purposes of this study, Forrester aggregated the interviewees’ experiences and combined the results into a single composite organization.
Prior to implementing Druva, interviewees noted their organizations faced complex infrastructure challenges, relying on traditional on-premises data center solutions that required extensive manual management to protect enterprise, cloud, and SaaS data. The prevalence of mobile computing exacerbated endpoint backup difficulties, and interviewees noted their existing data protection strategies hindered cloud adoption while being costly and inefficient. Additionally, the interviewees’ organizations struggled with scalability, routine maintenance disruptions, and vulnerabilities highlighted by a cybersecurity incident, emphasizing the need for more secure and streamlined backup solutions. The interviewees expressed concerns that their organizations’ cyber recovery experience would be slow and cumbersome.
After implementing Druva, the interviewees’ organizations significantly streamlined their infrastructure by adopting Druva’s public cloud SaaS solution, eliminating the need for traditional on-premises hardware and reducing management complexity. Druva’s automated backup solutions addressed multiple backup challenges and facilitated cloud adoption, leading to improved cost efficiency and scalability with a transition to an opex model. Additionally, Druva enhanced cybersecurity, simplified disaster recovery, and strengthened data governance and compliance, resulting in increased efficiency, security, and clarity in data protection practices.
Quantified benefits. Three-year, risk-adjusted present value (PV) quantified benefits for the composite organization include:
Unquantified benefits. Benefits that provide value for the interviewees’ organizations but are not quantified for this study include:
Costs. Three-year, risk-adjusted PV costs for the composite organization include:
The representative interviews and financial analysis found that a composite organization experiences benefits of $1.74 million over three years versus costs of $536,000, adding up to a risk-adjusted net present value (NPV) of $1.20 million and an ROI of 224%.
Return on investment (ROI)
Benefits PV
Net present value (NPV)
Payback
From the information provided in the interviews, Forrester constructed a Total Economic Impact™ framework for those organizations considering an investment in Data Security Cloud.
The objective of the framework is to identify the cost, benefit, flexibility, and risk factors that affect the investment decision. Forrester took a multistep approach to evaluate the impact that Data Security Cloud can have on an organization.
Interviewed Druva stakeholders and Forrester analysts to gather data relative to Data Security Cloud.
Interviewed four representatives at organizations using Data Security Cloud to obtain data about costs, benefits, and risks.
Designed a composite organization based on characteristics of the interviewees’ organizations.
Constructed a financial model representative of the interviews using the TEI methodology and risk-adjusted the financial model based on issues and concerns of the interviewees.
Employed four fundamental elements of TEI in modeling the investment impact: benefits, costs, flexibility, and risks. Given the increasing sophistication of ROI analyses related to IT investments, Forrester’s TEI methodology provides a complete picture of the total economic impact of purchase decisions. Please see Appendix A for additional information on the TEI methodology.
Readers should be aware of the following:
This study is commissioned by Druva and delivered by Forrester Consulting. It is not meant to be used as a competitive analysis.
Forrester makes no assumptions as to the potential ROI that other organizations will receive. Forrester strongly advises that readers use their own estimates within the framework provided in the study to determine the appropriateness of an investment in Data Security Cloud. For the interactive functionality using Configure Data/Custom Data, the intent is for the questions to solicit inputs specific to a prospect’s business. Forrester believes that this analysis is representative of what companies may achieve with Data Security Cloud based on the inputs provided and any assumptions made. Forrester does not endorse Druva or its offerings. Although great care has been taken to ensure the accuracy and completeness of this model, Druva and Forrester Research are unable to accept any legal responsibility for any actions taken on the basis of the information contained herein. The interactive tool is provided ‘AS IS,’ and Forrester and Druva make no warranties of any kind.
Druva reviewed and provided feedback to Forrester, but Forrester maintains editorial control over the study and its findings and does not accept changes to the study that contradict Forrester’s findings or obscure the meaning of the study.
Druva provided the customer names for the interviews but did not participate in the interviews.
Consulting Team:
Roger Nauth
| Role | Industry | Geography | Revenue | Number Of Employees |
|---|---|---|---|---|
| Chief technology officer | Media | United States | $11.5B | 1,800 |
| IT director | Automotive | United Kingdom | $2.5B | 3,000 |
| Senior IT systems engineer | Cybersecurity technology | United States | Not reported | 750 |
| Chief technology officer | Engineering and architecture | United States | Not reported | 670 |
The interviewees noted how their organizations struggled with common challenges, including:
The interviewees’ organizations searched for a solution that could:
All interviewees shared the same, primary solution requirement: a cloud-native system built for — and on — an accessible, data security-sensitive public cloud. As demonstrated in Figure 2, Forrester identified five sources of data that could be protected via one or a combination of four key backup use cases. Interviewees understood this positioning, which allowed them to optimize multiple objectives to harvest maximum protection and efficiency from Druva at a minimum cost.
Additional investment objectives included gaining the ability to:
As part of its organizationwide security and retention updates and best practices, interviewees had varying data security goals, ranging from moving completely to the cloud and eliminating all data centers to moving from fully on-premises to a hybrid SaaS model.
Figure 2. Sources and backup options for enterprises span technologies and locations
Based on the interviews, Forrester constructed a TEI framework, a composite company, and an ROI analysis that illustrates the areas financially affected. The composite organization is representative of the four interviewees, and it is used to present the aggregate financial analysis in the next section. The composite organization has the following characteristics:
Description of composite. The composite is a $6.5-billion enterprise based in the United States with 5,000 employees. The company is a highly complex organization with a requirement for robust data protection strategies and a significant interest in ransomware protection and disaster recovery.
| Ref. | Benefit | Year 1 | Year 2 | Year 3 | Total | Present Value |
|---|---|---|---|---|---|---|
| Atr | Decreased legacy solution and cloud service costs | $280,250 | $330,695 | $377,324 | $988,269 | $811,563 |
| Btr | Averted business loss from ransomware | $290,395 | $307,819 | $322,287 | $920,501 | $760,530 |
| Ctr | Improved backup and restore efficiencies | $66,690 | $66,690 | $66,690 | $200,070 | $165,848 |
| Total benefits (risk-adjusted) | $637,335 | $705,204 | $766,300 | $2,108,839 | $1,737,941 | |
Evidence and data. The combination of eliminating maintenance contracts, reducing storage requirements, retiring hardware, consolidating disaster recovery infrastructure, and shifting expenses highlighted the significant cost reduction benefits the interviewees’ organizations experienced after adopting Druva’s solution.
Modeling and assumptions. Based on the interviews, Forrester assumes the following about the composite organization:
Risks. The value of this benefit can vary across organizations due to the following:
Results. To account for these risks, Forrester adjusted this benefit downward by 5%, yielding a three-year, risk-adjusted total PV (discounted at 10%) of $812,000.
| Ref. | Metric | Source | Year 1 | Year 2 | Year 3 |
|---|---|---|---|---|---|
| A1 | Avoided legacy hardware, data center, and offsite storage costs | Composite | $150,000 | $177,000 | $201,957 |
| A2 | Avoided software, maintenance, and other services costs | Composite | $100,000 | $118,000 | $134,638 |
| A3 | Savings from cloud backup services | Interviews | $20,000 | $23,600 | $26,928 |
| A4 | Savings from optimized cloud consumption | Composite | $25,000 | $29,500 | $33,660 |
| At | Decreased legacy solution and cloud service costs | A1+A2+A3+A4 | $295,000 | $348,100 | $397,183 |
| Risk adjustment | ↓5% | ||||
| Atr | Decreased legacy solution and cloud service costs (risk-adjusted) | $280,250 | $330,695 | $377,324 | |
| Three-year total: $988,269 | Three-year present value: $811,563 | ||||
Evidence and data. Interviewees claimed their organizations averted business loss from ransomware due to improved cybersecurity confidence, investment in additional security measures, and specific Druva features. They also noted:
Modeling and assumptions. Based on the interviews, Forrester assumes the following about the composite organization:
Risks. The value of this benefit can vary across organizations due to the following:
Results. To account for these risks, Forrester adjusted this benefit downward by 5%, yielding a three-year, risk-adjusted total PV (discounted at 10%) of $761,000.
| Ref. | Metric | Source | Year 1 | Year 2 | Year 3 |
|---|---|---|---|---|---|
| B1 | Probability of experiencing one or more breaches per year | Forrester research | 90% | 90% | 90% |
| B2 | Mean cumulative cost of one or more breaches per year | Forrester research | $4,621,000 | $4,898,260 | $5,128,482 |
| B3 | Percentage of breaches external and internal attacks on organizational data and folder assets | Forrester research | 49% | 49% | 49% |
| B4 | Annual risk exposure from external and internal attacks on organizational data | B1*B2*B3 | $2,037,861 | $2,160,133 | $2,261,661 |
| B5 | Percentage of external and internal attacks addressed by Druva — ransomware | Forrester research | 20% | 20% | 20% |
| B6 | Percentage of loss from these ransomware attacks avoided with Druva | Interviews | 75% | 75% | 75% |
| Bt | Averted business loss from ransomware | B4*B5*B6 | $305,679 | $324,020 | $339,249 |
| Risk adjustment | ↓5% | ||||
| Btr | Averted business loss from ransomware (risk-adjusted) | $290,395 | $307,819 | $322,287 | |
| Three-year total: $920,501 | Three-year present value: $760,530 | ||||
Evidence and data. Interviewees stated backup and restore efficiencies improvements included reduced time spent on daily backup and verification tasks, decreased time required for backup management, and faster data recovery and device provisioning. These efficiency gains contributed to overall operational effectiveness and cost savings. Furthermore, reclaimed time enabled the interviewees’ organizations’ staff to focus on innovation rather than routine maintenance.
Modeling and assumptions. Based on the interviews, Forrester assumes the following about the composite organization:
Risks. The value of this benefit can vary across organizations due to the following:
Results. To account for these risks, Forrester adjusted this benefit downward by 5%, yielding a three-year, risk-adjusted total PV (discounted at 10%) of $166,000.
| Ref. | Metric | Source | Year 1 | Year 2 | Year 3 |
|---|---|---|---|---|---|
| C1 | Number of FTEs managing backups | Interviews | 2 | 2 | 2 |
| C2 | Number of hours per day required to manage backups prior to Druva | Interviews | 3 | 3 | 3 |
| C3 | Number of workdays per year | TEI standard | 260 | 260 | 260 |
| C4 | Number of hours per year managing backups prior to Druva | C1*C2*C3 | 1,560 | 1,560 | 1,560 |
| C5 | Percentage of reduction in work hours because of Druva | Interviews | 75% | 75% | 75% |
| C6 | Work hours avoided because of Druva | C4*C5 | 1,170 | 1,170 | 1,170 |
| C7 | Fully burdened hourly rate for an FTE responsible for managing backups | TEI standard | $60 | $60 | $60 |
| Ct | Improved backup and restore efficiencies | C6*C7 | $70,200 | $70,200 | $70,200 |
| Risk adjustment | ↓5% | ||||
| Ctr | Improved backup and restore efficiencies (risk-adjusted) | $66,690 | $66,690 | $66,690 | |
| Three-year total: $200,070 | Three-year present value: $165,848 | ||||
Interviewees mentioned the following additional benefits that their organizations experienced but were not able to quantify:
The value of flexibility is unique to each customer. There are multiple scenarios in which a customer might implement Data Security Cloud and later realize additional uses and business opportunities, including:
Flexibility would also be quantified when evaluated as part of a specific project (described in more detail in Appendix A).
| Ref. | Cost | Initial | Year 1 | Year 2 | Year 3 | Total | Present Value |
|---|---|---|---|---|---|---|---|
| Dtr | Backup service subscription fees | $0 | $152,640 | $176,299 | $203,626 | $532,565 | $437,452 |
| Etr | Third-party professional services costs | $31,500 | $0 | $0 | $0 | $31,500 | $31,500 |
| Ftr | Internal implementation costs | $29,700 | $0 | $0 | $0 | $29,700 | $29,700 |
| Gtr | Management and administrative costs | $0 | $15,120 | $15,120 | $15,120 | $45,360 | $37,601 |
| Total costs (risk-adjusted) | $61,200 | $167,760 | $191,419 | $218,746 | $639,125 | $536,253 | |
Evidence and data. Interviewees reported their experiences with Druva’s backup subscription fees. In Year 1, the initial cost for Druva’s backup subscription was $152,640. By Year 2, the cost increased to $176,299, reflecting the annual subscription fee. In Year 3, the subscription fee further rose to $203,626. The total cost over three years amounted to $532,565, with a present value of $437,452.
Modeling and assumptions. Based on the interviews, Forrester assumes the following about the composite organization:
Risks. The value of this cost can vary across organizations due to the following:
Results. To account for these risks, Forrester adjusted this cost upward by 0%, yielding a three-year, risk-adjusted total PV (discounted at 10%) of $437,000.
| Ref. | Metric | Source | Initial | Year 1 | Year 2 | Year 3 |
|---|---|---|---|---|---|---|
| D1 | Backup subscription fees for Druva | Interviews and Druva | $152,640 | $176,299 | $203,626 | |
| Dt | Backup service subscription fees | D1 | $0 | $152,640 | $176,299 | $203,626 |
| Risk adjustment | 0% | |||||
| Dtr | Backup service subscription fees (risk-adjusted) | $0 | $152,640 | $176,299 | $203,626 | |
| Three-year total: $532,565 | Three-year present value: $437,452 | |||||
Evidence and data. Interviewees noted upfront costs for third-party professional services that averaged $30,000.
Modeling and assumptions. Based on the interviews, Forrester assumes the following about the composite organization:
Risks. The value of this cost can vary across organizations due to the following:
Results. To account for these risks, Forrester adjusted this cost upward by 5%, yielding a three-year, risk-adjusted total PV (discounted at 10%) of $32,000.
| Ref. | Metric | Source | Initial | Year 1 | Year 2 | Year 3 |
|---|---|---|---|---|---|---|
| E1 | Third-party professional services costs | Interviews | $30,000 | |||
| Et | Third-party professional services costs | E1 | $30,000 | $0 | $0 | $0 |
| Risk adjustment | ↑5% | |||||
| Etr | Third-party professional services costs (risk-adjusted) | $31,500 | $0 | $0 | $0 | |
| Three-year total: $31,500 | Three-year present value: $31,500 | |||||
Evidence and data. The interviewees described a three-month implementation period with three employees dedicating 40 hours per month to implementation.
Modeling and assumptions. Based on the interviews, Forrester assumes the following about the composite organization:
Risks. The value of this cost can vary across organizations due to the following:
Results. To account for these risks, Forrester adjusted this cost upward by 10%, yielding a three-year, risk-adjusted total PV (discounted at 10%) of $30,000.
| Ref. | Metric | Source | Initial | Year 1 | Year 2 | Year 3 |
|---|---|---|---|---|---|---|
| F1 | Number of months for implementation | Interviews | 3 | |||
| F2 | Number of employees working on implementation | Interviews | 3 | |||
| F3 | Fully burdened hourly rate for an implementation employee | TEI standard | $75 | |||
| F4 | Number of hours devoted to implementation per person | Interviews | 40 | |||
| Ft | Internal implementation costs | F1*F2*F3*F4 | $27,000 | $0 | $0 | $0 |
| Risk adjustment | ↑10% | |||||
| Ftr | Internal implementation costs (risk-adjusted) | $29,700 | $0 | $0 | $0 | |
| Three-year total: $29,700 | Three-year present value: $29,700 | |||||
Evidence and data. Interviewees noted that their organizations employed two administrators who were dedicated to backup tasks consistently post-implementation.
Modeling and assumptions. Based on the interviews, Forrester assumes the following about the composite organization:
Risks. The value of this cost can vary across organizations due to the following:
Results. To account for these risks, Forrester adjusted this cost upward by 5%, yielding a three-year, risk-adjusted total PV (discounted at 10%) of $38,000.
| Ref. | Metric | Source | Initial | Year 1 | Year 2 | Year 3 |
|---|---|---|---|---|---|---|
| G1 | Number of people working on backup administration | Interviews | 2 | 2 | 2 | |
| G2 | Fully burdened hourly rate for a backup administrator | TEI standard | $75 | $75 | $75 | |
| G3 | Hours per month per backup administrators | Interviews | 8 | 8 | 8 | |
| Gt | Management and administrative costs | G1*G2*G3*12 | $0 | $14,400 | $14,400 | $14,400 |
| Risk adjustment | ↑5% | |||||
| Gtr | Management and administrative costs (risk-adjusted) | $0 | $15,120 | $15,120 | $15,120 | |
| Three-year total: $45,360 | Three-year present value: $37,601 | |||||
The financial results calculated in the Benefits and Costs sections can be used to determine the ROI, NPV, and payback period for the composite organization’s investment. Forrester assumes a yearly discount rate of 10% for this analysis.
These risk-adjusted ROI, NPV, and payback period values are determined by applying risk-adjustment factors to the unadjusted results in each Benefit and Cost section.
| Initial | Year 1 | Year 2 | Year 3 | Total | Present Value | |
|---|---|---|---|---|---|---|
| Total costs | ($61,200) | ($167,760) | ($191,419) | ($218,746) | ($639,125) | ($536,253) |
| Total benefits | $0 | $637,335 | $705,204 | $766,300 | $2,108,839 | $1,737,941 |
| Net benefits | ($61,200) | $469,575 | $513,785 | $547,555 | $1,469,715 | $1,201,688 |
| ROI | 224% | |||||
| Payback | <6 months | |||||
Total Economic Impact is a methodology developed by Forrester Research that enhances a company’s technology decision-making processes and assists vendors in communicating the value proposition of their products and services to clients. The TEI methodology helps companies demonstrate, justify, and realize the tangible value of IT initiatives to both senior management and other key business stakeholders.
Benefits represent the value delivered to the business by the product. The TEI methodology places equal weight on the measure of benefits and the measure of costs, allowing for a full examination of the effect of the technology on the entire organization.
Costs consider all expenses necessary to deliver the proposed value, or benefits, of the product. The cost category within TEI captures incremental costs over the existing environment for ongoing costs associated with the solution.
Flexibility represents the strategic value that can be obtained for some future additional investment building on top of the initial investment already made. Having the ability to capture that benefit has a PV that can be estimated.
Risks measure the uncertainty of benefit and cost estimates given: 1) the likelihood that estimates will meet original projections and 2) the likelihood that estimates will be tracked over time. TEI risk factors are based on “triangular distribution.”
The initial investment column contains costs incurred at “time 0” or at the beginning of Year 1 that are not discounted. All other cash flows are discounted using the discount rate at the end of the year. PV calculations are calculated for each total cost and benefit estimate. NPV calculations in the summary tables are the sum of the initial investment and the discounted cash flows in each year. Sums and present value calculations of the Total Benefits, Total Costs, and Cash Flow tables may not exactly add up, as some rounding may occur.
1 Total Economic Impact is a methodology developed by Forrester Research that enhances a company’s technology decision-making processes and assists vendors in communicating the value proposition of their products and services to clients. The TEI methodology helps companies demonstrate, justify, and realize the tangible value of IT initiatives to both senior management and other key business stakeholders.
2 Source: Forrester Consulting Cost Of A Cybersecurity Breach Survey, Q1 2021.
3 Ibid.
4 Ibid.
5 Ibid.
6 Ibid.
7 Source: Factors Driving The ROI Of Sustainability, Forrester Research, Inc., April 22, 2021.
8 Source: Tech Buyers’ Sustainability Questions, 2021, Forrester Research, Inc., August 2, 2021.
9 Ibid.
10 Source: Electricity 2024: Analysis and forecast to 2026, International Energy Agency, January 2024. Energy. Data Center Dynamics.
Cookie Preferences
Accept Cookies
A cookie is a small text file that a website saves on your computer or mobile device when you visit the site. It enables the website to remember your actions (data inputs, website navigation), so you don’t have to re-enter data when you come back to the site or browse from one page to another.
Behavioral information collected by our web analytics vendor is used to analyze data pertaining to visitor trends, plan website enhancements, and measure overall website effectiveness. We may also use cookies or web beacons to help us offer you products, programs, or services that may be of interest to you and to deliver relevant advertising. We may use third-party advertising companies to help tailor website content to users or to serve ads on our behalf. These companies may also employ cookies and web beacons to measure advertising effectiveness.
Please accept cookies and the collection of behavioral information to receive full functionality and enhance your experience. If you decline cookies, some features of the website may not function normally.
Please see our
Privacy Policy for more information.
https://mainstayadvisor.com/go/mainstay/gdpr/policy.html