Microsoft Online Services standards provide guidance for Data, and objects containing data, be classifying assets of several applicable security classification assigned a classification based on data type, DG-02 categories, and then implements a standard set of Security and jurisdiction of origin, jurisdiction domiciled, privacy attributes. context, legal constraints, contractual Data constraints, value, sensitivity, criticality to the Governance - “Information classification” is covered under the ISO 27001 organization and third party obligation for Classification standards, specifically addressed in Annex A, domain 7.2. For more retention and prevention of unauthorized information review of the publicly available ISO standards we are disclosure or misuse. certified against is suggested. Office 365 Security Response in the Context of CSA Cloud Control Matrix Controls DG-03 through DG-04 Control ID Description In CCM (CCM Version R1.1. Final) Microsoft Response Microsoft Online Services standards provide guidance for DG-03 classifying assets of several applicable security classification Policies and procedures shall be established categories, and then implements a standard set of Security and Data for labeling, handling and security of data and privacy attributes. Governance - objects which contain data. Mechanisms for Handling / label inheritance shall be implemented for “Information classification, labeling and handling” is covered under Labeling / objects that act as aggregate containers for the ISO 27001 standards, specifically addressed in Annex A, domain Security data. 7.2. For more information review of the publicly available ISO Policy standards we are certified against is suggested.
DG-02 Data Governance - Classification Data, and objects containing data, be assigned a classification based on data type, jurisdiction of origin, jurisdiction domiciled, context, legal constraints, contractual constraints, value, sensitivity, criticality to the organization and third party obligation for retention and prevention of unauthorized disclosure or misuse. Microsoft Online Services standards provide guidance for classifying assets of several applicable security classification categories, and then implements a standard set of Security and privacy attributes. “Information classification” is covered under the ISO 27001 standards, specifically addressed in Annex A, domain 7.2. For more information review of the publicly available ISO standards we are certified against is suggested. Office 365 Security Response in the Context of CSA Cloud Control Matrix Controls DG-03 through DG-04 Control ID In CCM Description (CCM Version R1.1. Final) Microsoft Response DG-03 Data Governance - Handling / Labeling / Security Policy Policies and procedures shall be established for labeling, handling and security of data and objects which contain data. Mechanisms for label inheritance shall be implemented for objects that act as aggregate containers for data. Microsoft Online Services standards provide guidance for classifying assets of several applicable security classification categories, and then implements a standard set of Security and privacy attributes. “Information classification, labeling and handling” is covered under the ISO 27001 standards, specifically addressed in Annex A, domain 7.2. For more information review of the publicly available ISO standards we are certified against is suggested.
Standard%20Response%20to%20Request%20For%20Information-O365-Security-Privacy_v2.docx