Microsoft’s Cloud Infrastructure Receives FISMA Approval

By Mark Estberg, Senior Director of Risk and Compliance, Global Foundation Services  Although cloud computing has emerged as a hot topic only in the past few years, Microsoft has been running some of the largest and most reliable online services in the world for over 16 years. Our cloud infrastructure supports more than 200 cloud…

12

Information Security Management System for Microsoft Cloud Infrastructure

By Mark Estberg, Senior Director of Risk and Compliance, Global Foundation Services   I often hear questions that are variations of “How does Microsoft secure its cloud?” and “How does Microsoft manage compliance in the cloud?”  The answer is similar to how any enterprise operates a comprehensive security program and is based on our information…

1

Continuing to Share Best Practices on Security and Privacy for the Cloud

  By Mark Estberg, Senior Director of Risk and Compliance, Global Foundation Services    Microsoft has released several papers over the last couple of months on how we secure the cloud infrastructure, manage online service security, and how we developed and manage our compliance framework. Together, these papers describe some of the factors that are…

0

Introducing the Microsoft Compliance Framework for Online Services

  By Mark Estberg, Senior Director of Risk and Compliance, Global Foundation Services    Sometimes it can seem like half the battle of securing online services involves satisfying audits and otherwise demonstrating that you are complying with industry and government regulations.  Just like any online service provider, Microsoft is subject to a large number of…

0

Response to Question about SAS 70 Objectives

By Pete Boden, GM, Online Services Security & Compliance, Global Foundation Services  Following our posting further below we received a question about what the objectives were for our SAS 70 certification. Here’s our response: The Global Foundation Services (GFS)-managed online operating environment is required to meet a number of government-mandated and industry security requirements, many…

0

Securing Microsoft’s Cloud Infrastructure: Part 2

By Pete Boden, GM, Online Services Security & Compliance, Global Foundation Services    The release last week of our white paper on Securing Microsoft’s Cloud Infrastructure has generated a lot of discussion in the industry, which was our intent. We wrote the paper in part to communicate our practices to customers concerned about security in…

0

Securing Microsoft’s Cloud Infrastructure

By Charlie McNerney, GM, Business & Risk Management, Global Foundation Services   When we talk with business customers about what they expect from cloud computing, two main themes emerge. On the one hand, technology business decision makers are enticed by the idea that purchasing services from a cloud environment could allow them to save money…

2