Using Cloud Services? How are You Managing Risk?
Most organizations are “in the cloud” to some degree. You may be running Office 365 for Email or you may be using a cloud based Enterprise Resource Planning or Accounting package. If you think that moving your systems to the cloud has eliminated risk, you should make sure you have considered these controls and know what your vendors are doing to protect your data:
1) What is being backed up and how frequently
2) What access controls are in place to prevent unauthorized access
3) What is the service level agreement (SLA) that is in place (i.e. what does your vendor guarantee for availability) and what happens if that SLA is breached
If you have questions using the cloud or your vendors, give The Atteberry Group a call today.
Worried about who can access Office 365 data in the cloud?
The single biggest impediment that we see to clients accepting Office 365 is “Who has access to our data?” Well, with Office 365, the answer just became much simpler – you or those you approve.
According to Vijay Kumar, senior product marketing manager, and Raji Dani, principal program manager for the Office 365 Security team: “Microsoft Engineers do not have standing access to any service operation. All access is obtained through a rigorous access control technology called Lockbox. Today, Lockbox enforces access control through multiple levels of approval within Microsoft, providing just-in-time access with limited and time-bound authorization. In addition, all access control activities in the service are logged and audited.”
In a recent announcement, Microsoft outlined Customer Lockbox for Office 365 and the protection it provides Office 365 users. Rajesh Jha, corporate vice president for the Office 365 team stated: …”Customer Lockbox for Office 365, provides unprecedented customer control over content residing in Office 365, so customers can be assured that their content will not be accessed by Microsoft employees without their explicit approval. It brings customers into the access approval loop, requiring the customer to provide explicit approval of access to their content by a Microsoft employee for service operations.”
Specifically, use of Lockbox for Office 365 will give you the ability to accept or reject a request from Microsoft to access your Office 365 data. It doesn’t get much easier than that.
Need additional information on how Office 365 is secured and how migrating to Office 365 can help your business? Contact The Atteberry Group a call at 213.393.5060 or email us at firstname.lastname@example.org
Material for this post taken from http://blogs.office.com/2015/04/21/announcing-customer-lockbox-for-office-365/ and http://blogs.office.com/2015/04/21/enhancing-transparency-and-control-for-office-365-customers/
1 / 1