Microsoft Azure completes star registration detailed disclosure security features

Microsoft has made the Cloud Security Alliance (CSA) star Security registration for its Azure cloud platform, which lists detailed information about its security features by cloud service providers.

The security, trust and guarantee Registration (STAR) project began last year, but only 3 companies were registered 6 months after its release, and each registered enterprise needed to fill up 170 problem forms. Microsoft is one of the first 3 manufacturers, the other two are mimecast and solutionary. Microsoft was submitting security information for Office 365. In March this year, two more projects were registered, namely, Microsoft Azure and it and cloud management vendors Shi International.

In the registration program, Microsoft officials said Azure's "core Services" had been certified ISO 27001, and had planned to certify the rest of the platform's functionality. The so-called "core" services, mainly related to computing, storage and virtual network functions. At the same time, Microsoft's global infrastructure, the system that runs a variety of Microsoft online Services, has passed the audit of the American Institute of Certified Accountants (AICPA) Audit standard 70th (SAS 70). The SAS 70 audit could replace SSAE 16 (Forensic business guideline 16th) and ISAE 3402 (International Accreditation Service Guideline No. No. 3402).

Some cloud watchers are optimistic about the future of star, saying it is a place where customers can easily compare and contrast the security features of each vendor. But Gartner analyst Kyle Hilgendorf also believes that more business registration is needed to fully realize the potential of star. Some big manufacturers, such as Google, McAfee, Verizon and Intel, have agreed to star registration, but they have not done so at the moment, according to CSA officials.

Kellie Ann Chainier, a Microsoft Cloud business manager, said, "Our customers can go to the Star register and get our information about cloud security controls, and they can look at what we do at the data center level." ”