“Your complete office in the cloud” is how we think of Microsoft Office 365. While it gives us enormous pride that one billion people use Office, we deeply appreciate the responsibility we have to meet and exceed our customers’ expectations every day. We recognize that productivity apps are mission critical; using them is how work gets done. It is imperative for us to ensure our service is trustworthy and reliable while we continue to add new capabilities to Office 365. Our measure for this is service availability. Features:
- 24-hour monitoring of datacenters.
- Multi-factor authentication, including biometric scanning for datacenter access.
- Internal datacenter network is segregated from the external network.
- Role separation renders location of specific customer data unintelligible to the personnel that have physical access.
- Faulty drives and hardware are demagnetized and destroyed.
Logical Datacenters
- Lockbox processes for a strictly supervised escalation process greatly limit human access to your data. Learn how to activate Lockbox.
- Servers run only processes that are whitelisted, minimizing risk from malicious code.
- Dedicated threat management teams proactively anticipate, prevent, and mitigate malicious access.
- Port scanning, perimeter vulnerability scanning, and intrusion detection prevent or detect any malicious access.
Data Security
- Encryption at rest protects your data on our servers.
- Encryption in transit with SSL/TLS protects your data when it’s transmitted between you and Microsoft.
- Threat management, security monitoring, and file/data integrity prevent or detect any tampering of data.
- Exchange Online Protection provides advanced security and reliability against spam and malware to help protect your information and access to email.
User Controls
- Office 365 Message Encryption allows users to send encrypted email to anyone, whatever email service recipients may use.
- Data loss prevention can be combined with Rights Management and Office 365 Message Encryption to give greater controls to your admins to apply appropriate policies to protect sensitive data.
- S/MIME provides message security with certificate-based email access.
- Azure Rights Management prevents file-level access without the right user credentials.
Admin Controls
- Multi-factor authentication protects access to the service with a second factor such as phone.
- Data loss prevention prevents sensitive data from leaking either inside or outside the organization while providing user education and empowerment.
- Built-in mobile device management capabilities allow you to manage access to corporate data.
- Mobile application management within Office mobile apps powered by Intune provides granular controls to secure data contained in these apps.
- Built in antivirus and antispam protection along with advanced threat protection safeguard against external threats.
- Office 365 Advanced Security Management provides enhanced visibility and control into your Office 365 environment.