The data protection market is highly dynamic, driven by new application workload deployments and cloud capabilities. Healthcare organizations are embracing cloud computing and are more willing to move certain workloads, such as IT operations, to the cloud. Healthcare IT executives acknowledge that managed service providers know more about datacenter security than their own organizations, especially when it comes to cybersecurity. Given the rise of ransomware attacks, a solid data protection plan that combines backup as a service (BaaS) and disaster recovery as a service (DRaaS) is an imperative. This paper examines the growing need for data protection services, including BaaS and DRaaS. It also looks at the role of Commvault and its customer Mercy Technology Services, which is using Commvault data protection solutions to offer BaaS and DRaaS to other healthcare organizations.