4. Common Question Who can benefit from Cloud? Every enterprise today can benefit from Cloud

5. Ask Do note that cloud is always moving, please make sure do not read OLD blogs and articles. If we answer a question stating “feature not available today”, revisit the question again in few months and answer could be different.

6. Unspoken Concern Will public cloud platform make my administrators lose their job? In long run your administrators role will change. They will manage less infrastructure and be a Strategic Technology Architect managing more cloud contracts.

7. Availability Question? Will cloud datacenter be up? Public cloud provider datacenter will be at least as good as your own datacenter. You should look at your provider promised SLA and historical SLA.

8. Security Question? Can public cloud platform keep my data safe? a)You must identify a provider who made public cloud strategic to their company as its main business income. b)You must learn to trust your provider c)You are also responsible for your data

11. Social media giants Facebook, LinkedIn, among others, get hacked… repeatedly.

13. Service-level security capabilities

14. Physical Security Network Host Application Admin Dat a

19. Engineers must have current background check, fingerprinting, security training. System grants least privilege required to complete task.

23. Content DB ABC D E Key Store ABCD A B C D E

25. Customer security controls

31. Browser

33. Exchange server Data disk Exchange server Data disk Message Delivery RMS, S/MIME protected

37. Secondary mailbox with separate quota Managed through EAC or PowerShell Available on-premises, online, or through EOA Automated and time-based criteria Set policies at item or folder level Expiration date shown in email message Capture deleted and edited email messages Time-based in-place hold Granular query-based in-place hold Optional notification Web-based eDiscovery center and multi-mailbox search Search primary, in-place archive, and recoverable items Delegate through roles- based administration De-duplication after discovery Auditing to ensure controls are met

39. What does compliance mean to customers? What standards do we meet? What is regulatory compliance and organizational

41. ISO SOC

47. http://aka.ms/fitc

48. http://aka.ms/fitc4wp

51. Article 29 Working Party – collection of data protection authorities in Europe regulating world’s toughest privacy laws Validation by EU Data Protection Authorities for Microsoft’s commercial commitments for DPA/EU Model clauses (covering Office 365, Azure, CRM Online, and Intune) Microsoft is the only provider to have received this validation Standard part of contracts as of July 1st http://www.tgdaily.com/enterprise/100136-microsoft-gains-eu-security-approval

58. Microsoft Security Engineering Center - Security Development Lifecycle (SDL) Exchange Hosted Services (part of Office 365) Hotmail SSAE-16 U.S.-EU Safe Harbor European Union Model Clauses (EUMC) Health Insurance Portability and Accountability Act Business Associate Agreement (HIPAA BAA) Data Processing Agreement (DPA) Active Directory Microsoft Security Response Center (MSRC) Global Foundation Services (GFS) ISO 27001 Certification Microsoft Security Essentials 1 st Microsoft Data Center Trustworthy Computing Initiative (TwC) Microsoft experience and credentials Xbox Live MSN Bill Gates Memo Windows Azure FISMA Windows Update Malware Protection Center SAS-70 Microsoft Online Services (MOS) One of the world’s largest cloud providers & datacenter/network operators CJIS Security Policy Agreement 20052010 2013 2014 Bing/MSN Search 1989 1995 2000 Outlook.com