Reports, Whitepapers, and Artifacts
Formerly referred to as the trust documents, this section details information regarding architecture and protections built into the Microsoft 365 platform. There are several documents available in this section of the Service Trust Portal that can enable organizations to better understand how the Microsoft 365 platform is designed and operated. With these documents and whitepapers, organizations can be confident about how their data is being collected, stored, and used in the service.
The following areas will provide an example of how these documents can be used to address some of the most common questions in an organization:
- Business Continuity and Disaster Recovery
- Pen Test and Security
- Privacy & Data Protection
- FAQ and Whitepapers
Let’s examine each of these areas in a little more detail.
Business Continuity and Disaster Recovery
The Business Continuity and Disaster Recovery page contains documents related to how the Microsoft 365 service has been tested and audited for disaster recovery events. This page lists several ISO and System and Organization Controls (SOC) reports, as both frameworks have components focused on maintaining business operations in the event of different types of failures or outages.
Pen Test and Security
The Pen Test and Security page contains reports that provide the results of audits performed during penetration testing exercises and other security tests. Microsoft hires third-party independent agencies to conduct regular security tests against the platform components using Microsoft’s recommended best practices.
Privacy & Data Protection
The Privacy & Data Protection page contains reports that provide details about Microsoft’s compliance with several data protection and privacy requirements, which include international laws as well as industry regulations. See Figure 10.6:
Figure 10.6 – Privacy & Data Protection page
Like other areas of the Service Trust Portal, you can sort and filter by a variety of parameters.