Over the years, Office 365 has made significant investments in the areas of security, compliance and privacy—now Office 365 customers can easily assess Office 365’s capabilities in these areas by leveraging Office 365 controls to map with the Cloud Security Alliance Cloud Control Matrix. We hope this helps Office 365 customers efficiently perform their due diligence when evaluating Office 365, onboarding Office 365 or renewing their subscriptions.
Maintaining the security and privacy of customer data in Office 365 is our top priority. In line with our efforts to be more transparent with our customers, we have enhanced auditing around Office 365 information security and privacy controls. Office 365 is one of the first major cloud service providers to be assessed against both ISO 27001 and ISO 27018 standards.