ONLINE SECURITY

Delivering trustworthy, available online services that create a competitive advantage for Microsoft.

Title Date File Type

Information Security Management System for Microsoft Cloud Infrastructure
This paper describes the Information Security Management System program for Microsoft's Cloud Infrastructure, as well as some of the processes and benefits realized from operating this model. An overview of the key certifications and attestations Microsoft maintains to prove to cloud customers that information security is central to Microsoft cloud operations is included.

November 2010  

Windows Azure™ Security Overview
To help customers better understand the array of security controls implemented within Windows Azure from both the customer's and Microsoft operations' perspectives, this paper provides a comprehensive look at the security available with Windows Azure. The paper provides a technical examination of the security functionality available, the people and processes that help make Windows Azure more secure, as well as a brief discussion about compliance.

August 2010  

Security Best Practices for Developing Windows Azure Applications
This white paper focuses on the security challenges and recommended approaches to design and develop more secure applications for Microsoft�s Windows Azure platform. It is intended to be a resource for technical software audiences: software designers, architects, developers and testers who design, build and deploy more secure Windows Azure solutions.

June 2010
Microsoft’s Compliance Framework for Online Services October 2009 PDF Document | File size 877KB 
Webcast: Online Services Security and Compliance: Microsoft’s Compliance Framework for Online Services
Learn how Microsoft adapted their compliance practices to address the changing landscape of regulations and statutes to establish industry best practice standards for online services.  A great overview of the Microsoft Compliance Framework for Online Services white paper (October 2009).
October 2009  
Whiteboard Session:  Online Services Security and Compliance: Microsoft’s Compliance Framework for Online Services

This short white board session that will introduce you to how Microsoft’s Online Services Security and Compliance (OSSC) team adapted their compliance practices to address the changing landscape of regulations, statutes, and establish industry best practice standards for online services. The session introduces Microsoft’s Compliance Framework for Online Services white paper (October 2009).

October 2009  
Securing Microsoft's Cloud Infrastructure May 2009  PDF document | File size 384KB