Event: Secure Data Transition to Microsoft Office 365 Date: Thursday, 2 nd June, 2016 City: London. Accessible content is available upon request.

Transcription

1 Event: Secure Data Transition to Microsoft Office 365 Date: Thursday, 2 nd June, 2016 City: London Accessible content is available upon request.

2 Microsoft Confidential

3 UK Market Landscape The largest cloud market in Europe Set to more than double in value over the next 4 years, to over $9.2bn With a cloud adoption rate of 84%*, the UK is a global leader in embracing the benefits of cloud-based solutions *Cloud Industry Forum s UK Cloud adoption snapshot & trends for

4 Cloud First When procuring new or existing services, public sector organisations should consider and fully evaluate potential Cloud solutions first before they consider any other option. The formal introduction of a Cloud First policy will drive wider adoption of cloud computing in the public sector, boosting business and furthering savings and efficiencies through the government CloudStore, which is a quicker, cheaper and more competitive way for the public sector to buy IT Francis Maude, ex Minister for the Cabinet Office

5 G-Cloud 2,500 suppliers 22,000+ services public, private and hybrid cloud

6 Most UK Government Data is Cloud Ready Top Secret Secret Official = up to 90% 90% Hyperscale cloud solutions with industry standard security. Office 365, Microsoft Azure & Dynamics CRM all previously ACCREDITED for Official Data

7 UK Cloud Security Principles Principles 1 2 Data in transit protection Asset protection and resilience 8 9 Supply chain security Secure consumer management 3 Separation between consumers 10 Identity and authentication 4 Governance framework 11 External interface protection 5 Operational security 12 Secure service administration 6 Personnel security 13 Audit information provision to consumers 7 Secure development 14 Secure use of the service by the consumer There are only 14 principles as opposed to hundreds in other countries Microsoft s solutions remain aligned to these principles. Previously cloud services could receive pan-government accreditation. Microsoft s key cloud services were all accredited for Official Data Now individual organizations are being asked to make their own determinations about which cloud services are suitable for use in public sector organizations.

8 your cloud provider is your partner Responsibility On-Prem IaaS PaaS SaaS Customer management of risk Data Classification End Point Devices Shared management of risk Identity & access management Data classification and accountability Client & end-point protection Identity & access management Application level controls Network controls Provider management of risk Physical Networking Host Security Physical Security Cloud Customer Cloud Provider

9 A cloud you can trust At Microsoft, we never take your trust for granted We are serious about our commitment to protect customers in a cloud first world. We live by standards and practices designed to earn your confidence. We collaborate with industry and regulators to build trust in the cloud ecosystem. Businesses and users are going to embrace technology only if they can trust it. Satya Nadella

10 Cloud Commitments to Customers

11 Continued Investments In Compliance Microsoft is meeting customer security needs with the industry's largest compliance portfolio ISO ISO Cloud Controls Matrix PCI DSS Level 1 SOC 2 Type 2 SOC 1 Type 2 Shared Assessments Content Delivery and Security Association European Union Model Clauses United Kingdom G-Cloud ENISA IAF China Multi Layer Protection Scheme China GB China CCCPPF Singapore MTCS Level 3 Australian Signals Directorate New Zealand GCIO Japan Financial Services Section 508 VPAT FedRAMP JAB P-ATO HIPAA / HITECH FIPS CFR FERPA DISA Level 2 CJIS IRS 1075 ITAR-ready Part 11

12 OFFICIAL - SENSITIVE Microsoft Personnel only access data by exception. Encryption at rest. Encryption in Transit with TLS1.2. Labelling support. DLP to coach users and audit their choices. Azure Rights Management. S/MIME or PGP support. ISO27018 protecting privacy for personal data stored in the cloud ISB 1596 HSCIC standard for ing sensitive patient data

13 Delivering this Opportunity to You Hyper scale infrastructure, 28 regions worldwide US Gov Iowa West US California Central US Iowa South Central US Texas North Central US Illinois Canada Central Toronto US Gov Virginia Canada East Quebec City East US Virginia East US 2 Virginia United Kingdom Regions North Europe Ireland West Europe Netherlands Germany North East Magdeburg Germany Central Frankfurt India West Mumbai India Central Pune China South* Shanghai India South Chennai China North* Beijing East Asia Hong Kong Japan East Tokyo, Saitama Japan West Osaka SE Asia Singapore Australia East New South Wales Brazil South Sao Paulo State Australia South East Victoria Operational Announced/not operational

14 Microsoft Cloud UK Datacenters Microsoft will deliver Office 365, Azure and CRMOL from local data centres in multiple locations within the U.K. This will improve resiliency and latency and enable data replication, redundancy and backup within the UK region. The new UK locations will enable data residency for core data, for customers in the U.K., bringing world-class reliability and performance to government organizations, regulated industries, and other businesses. Data stored at ret includes Azure Core workloads and Exchange and SharePoint data. Built on exactly the same foundational principles of security, privacy & control, compliance, and transparency, and no difference in features or support model. O365, Azure and CRM Online will continue to comply with the UK Government OFFICAL accreditation including data under the OFFICIAL sensitive handling caveat.

15 Microsoft Confidential

16 Resources Microsoft Trust Center Trust Center ebooks Cloud Confidence ebook Cyber Security Demystified Blogs Privacy Shield Microsoft s case against the U.S. government Digital Constitution A summary of the latest news and views on Microsoft s case against the U.S. government s attempt to obtain customer content. Transparency Hub Resources the latest figures on legal demands for customer data we receive from law enforcement agencies around the world. Microsoft Online Services Terms Our contractual commitments to data processing Public Sector specific resources Government adopts Cloud first policy 14 Cloud Security principles Download the free Cloud Confidence ebook Download the free Cyber Security Demystified ebook Microsoft s commitments under the EU-US Privacy Shield Keeping secrecy the exception, not the rule: An issue for both consumers and businesses Digital Constitution Transparency Hub Law Enforcement Requests Report US National Security Orders Reports Online Services Terms Cloud First policy 14 Cloud Security Principles Managing OFFICIAL Data

17 During our next session, we will discuss: Top reasons to utilise a hybrid SharePoint deployment for Enterprise Content Management (ECM) Available options for carrying out your migration Best practice approaches for your migration based on actual customer scenarios How AvePoint Migration Services can help you migrate with ease AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc. No part of this may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written consent of AvePoint, Inc.

18 Thank You! Contact Us: Visit Us: Request a demo Download a 30 Day trial AvePoint, Inc. All rights reserved. Confidential and proprietary information of AvePoint, Inc.