Many of you have asked us about how we plan and prepare in Azure so that you can learn from our best practices as well as have the peace of mind that your applications, and data, are safe and available in Azure. Today we are pleased to announce that Microsoft Azure has achieved ISO 22301 certification. Microsoft is the first hyper-scale cloud provider to achieve this important certification that ensures your Azure applications are backed by the highest standard for business continuity and disaster preparedness.
For years, we’ve heard from organizations about the importance of disaster preparedness and continuous improvement in their operations to ensure their IT systems can survive, and be restored, in the aftermath of major incidents (such as natural disasters, power outages, or cyber-attacks). As of today, we are the only major cloud provider to prove our commitment of being fully prepared for all eventualities through this internationally recognized standard for business continuity, ISO 22301. Our ISO 22301 certification is applicable across both our Azure public and Azure Government clouds.
What does Azure achieving ISO 22301 provide? It gives you the assurance that you can trust Microsoft Azure with your mission critical applications by providing an extensive independent 3rd party audit of all aspects of Azure’s business continuity. This includes the following:
- how backups are validated
- how recovery is tested
- the competency/training of critical staff
- the level of resources available
- buy-in by senior management
- how risks are assessed/mitigated
- adherence to legal/regularly requirements
- the process for response to incidents
- the process for learning from incidents
Being prepared for whatever happens is not easy, but it’s something that we in Azure take seriously. We test at all levels of our infrastructure to ensure that every day we are working to improve the cloud experience for you. We do tests as small as fault injections at the individual service layer, all the way up to entire region fail-over tests. We’ve been doing these tests for years and this work has helped us continuously improve the Azure infrastructure and services you use every day. ISO 22301 reviews and validates that we are selecting the right tests of our cloud services, that we’ve created programs to continuously run those tests, and that we implement improvements based on those test results.
Achieving the ISO 22301 certification demonstrates the seriousness of our commitment to providing you the highest quality of service, and our achievement of this rigorous third party attestation is part of our promise to provide you the most robust infrastructure possible for deploying your applications in the cloud. To learn more about Microsoft Azure’s ISO 22301 certification and download a copy of the certification, please visit https://aka.ms/iso22301cert.