1. Windows Azure Windows Azure: Security, Privacy, ComplianceTitle: Country Mgrs., Account Mgrs., BG leads, BG execs & speakers Speaker: BDM, ITDMs Audience: Length & Version: 30-45 minutes, last updated Feb. 2014 Content Level:Level 100/200 for external & internal use Usage Guide: DO NOT edit slides or text Send any suggested edits to deck contact Translation of content is allowed Augment content with local customer stories Deck Contacts: Windows Azure Marketing Team (alias: sfender) Activity that leads to qualified sales prospect; request for EBC briefing Desired Outcomes: 20-40% Sales Cycle:

2. Windows Azure Deck overview 2 Opening Enter story from cloud trends & security needs Identify MS approach as the answer Introduce security, privacy, compliance Security Value Privacy Value Security best practices Infrastructure protection Network protection Identity & access Data protection Privacy by design Compliance Value Simplified compliance Close with benefits & CTA Benefits Customers CTA

3. Windows Azure Security, Privacy, & Compliance Your name goes here Your title goes here

4. Windows Azure 430B+ Windows Azure AD authentications 280% year-over-year database growth in Windows Azure 50% of Fortune 500 use Windows Azure $25,000 in the cloud would cost $100,000 on premises (Microsoft Azure BI Team, STMG Proof Points Central) EconomicsScale 30,000 to 250,000 Scale from site visitors instantly (Case Study: Autocosmos) 2 weeks to deliver new services vs. 6-12 months with traditional solution (Case Study: HarperCollins Publishers) Speed Technology trends: driving cloud adoption 4 of CIOs will embrace a cloud-first strategy in 2016 (IDC CIO Agenda webinar) Cloud Trend: 70% BENEFITS WINDOWS AZURE ADOPTION

5. Windows Azure Pre-adoption concern 60% cited concerns around data security as a barrier to adoption 45% concerned that the cloud would result in a lack of data control Benefits realized 94% experienced security benefits they didn’t previously have on-premise 62% said privacy protection increased as a result of moving to the cloud Cloud innovation OPPORTUNITY FOR SECURITY & COMPLIANCE BENEFITS SECURTIY Design/Operation Infrastructure Network Identity/access Data PRIVACY COMPLIANCE

6. Windows Azure Trustworthy foundation BUILT ON MICROSOFT EXPERIENCE AND INNOVATION Trustworthy Computing Initiative Security Development Lifecycle Global Data Center Services Malware Protection Center Microsoft Security Response Center Windows Update 1 st Microsoft Data Center Active Directory SOC 1 CSA Cloud Controls Matrix PCI DSS Level 1 FedRAMP/ FISMA UK G-Cloud Level 2 ISO/IEC 27001:2005 HIPAA/ HITECH Digital Crimes Unit SOC 2 E.U. Data Protection Directive 19891995200020052010

7. Windows Azure Shared responsibility REDUCE SECURITY COSTS + MAINTAIN FLEXIBILITY, ACCESS, & CONTROL CustomerMicrosoft On-PremisesIaaSPaaSSaaS Storage Servers Networking O/S Middleware Virtualization Data Applications Runtime

8. Windows Azure Transparency & independent verification 8 Best practices and guidance Third-party verification Cloud Security Alliance Security intelligence report Compliance packages Trust Center Access to audit reports Security Response Center progress report AID CUSTOMERS IN MEETING SECURITY & COMPLIANCE OBLIGATIONS

9. Windows Azure Microsoft approach in action 9

10. Windows Azure Security 10 We chose Azure because all things being equal, it is the easiest cloud platform to work with. Security and patching is already taken care of, so it is less labour-intensive.”

11. Windows Azure Security at the core Operational security controls Assume breach Incident response Software Development Lifecycle (SDL)

12. Windows Azure 12 24 hour monitored physical security System monitoring and logging Patch management Anti-Virus/Anti-Malware protection Intrusion detection/DDoS Penetration testing Dedicated US government cloud Infrastructure protection

13. Windows Azure Network protection Encrypted connections Virtual Networks ExpressRout e Network isolation

14. Windows Azure 14 Enterprise cloud identity – Windows Azure AD Access monitoring Single sign-on Multi-Factor Authentication Role based access controls Identity & access

15. Windows Azure Encrypted data transfer Encryption options for stored data Data segregation Choice of data location Data redundancy Data destruction 15 Data protection

16. Windows Azure Privacy Our vision is to be the national leader in patient-centered e-healthcare.… Using Windows Azure as our delivery system provides us with a level of trust and reliability that makes this possible.”

17. Windows Azure 1010101010101010101010101010101010101010101010101010 1010101010101010101010101010 10101010101010101010101010101010 Contractual commitments Restricted data access and use No use for advertising Privacy by Design Privacy by design

18. Windows Azure Compliance Windows Azure was attractive because it has built-in capabilities for compliance with a wide range of regulations and privacy mandates.”

19. Windows Azure ISO 27001SOC 1 Type 2 SOC 2 Type 2 FedRAMP/FISMA PCI DSS Level 1 UK G-Cloud HIPAA/HITECH Information security standards Effective controls Government & industry certifications Simplified compliance

20. Windows Azure Unified platform for modern business Microsoft commitment

21. Windows Azure Trusted by leading companies 21

22. Windows Azure  Talk to a Microsoft security expert  Explore additional resources:  Microsoft Trust Center for Windows Azure: http://www.windowsazure.com/en-us/support/trust-center http://www.windowsazure.com/en-us/support/trust-center  Trustworthy Computing Cloud Services: www.microsoft.com/trustedcloudwww.microsoft.com/trustedcloud

23. Windows Azure