Microsoft Online Services is an isolated server centric environment Mobile code shall be authorized before its which mobile code isn’t as applicable as in a desktop environment. SA-15 installation and use, and the configuration In addition, all code is explicitly installed on our servers by shall ensure that the authorized mobile Administrators through the change control process. Security code operates according to a clearly Architecture - defined security policy. All unauthorized “Controls against mobile code” is covered under the ISO 27001 Mobile Code mobile code shall be prevented from standards, specifically addressed in Annex A, domain 10.4.2. For executing. more information review of the publicly available ISO standards we are certified against is suggested.
SA-15 Security Architecture - Mobile Code Mobile code shall be authorized before its installation and use, and the configuration shall ensure that the authorized mobile code operates according to a clearly defined security policy. All unauthorized mobile code shall be prevented from executing. Microsoft Online Services is an isolated server centric environment which mobile code isn’t as applicable as in a desktop environment. In addition, all code is explicitly installed on our servers by Administrators through the change control process. “Controls against mobile code” is covered under the ISO 27001 standards, specifically addressed in Annex A, domain 10.4.2. For more information review of the publicly available ISO standards we are certified against is suggested.
Standard%20Response%20to%20Request%20For%20Information-O365-Security-Privacy_v2.docx