{"id":5106,"date":"2015-11-09T00:00:00","date_gmt":"2015-11-09T08:00:00","guid":{"rendered":"https:\/\/azure.microsoft.com\/blog\/microsoft-azure-updates-cloud-security-attestation"},"modified":"2025-09-18T08:15:06","modified_gmt":"2025-09-18T15:15:06","slug":"microsoft-azure-updates-cloud-security-attestation","status":"publish","type":"post","link":"https:\/\/azure.microsoft.com\/en-us\/blog\/microsoft-azure-updates-cloud-security-attestation\/","title":{"rendered":"Microsoft Azure Updates Cloud Security Attestation"},"content":{"rendered":"\n

Meeting the needs of our customers remains at the forefront of what the Global Compliance and Ecosystem Team does every day, and is why we continue to invest heavily in meeting standards and regulatory requirements around the world.<\/p>\n\n\n\n

I\u2019d like to update you all on the work we\u2019ve been doing with the following major releases and updates:<\/p>\n\n\n\n

Global standards \u2013 Updates on Azure\u2019s Cloud Security Alliance<\/a> (CSA) Cloud Control Matrix<\/a> (CCM) response<\/h2>\n\n\n\n

This month I am proud to announce the release of Microsoft Azure\u2019s updated response<\/a> to the Cloud Security Alliance’s<\/a> (CSA) Cloud Control Matrix<\/a> (CCM) version 3.01 framework, providing an assessment of Azure\u2019s security, privacy, and availability features and processes across the entire platform. The CSA is an industry-leading non-profit organization that is widely viewed as an open and fair broker of compliance commitments. The CCM provides a standardized and accepted set of controls which are aligned to many of the major industry certifications, such as NIST, PCI, ISO, and others. Azure\u2019s attestation\u2014and its entry into the CSA Security, Trust, and Assurance Registry (STAR)\u2014provides a comprehensive \u201cone stop shop\u201d addressing standard requests for information that cloud customers have in order to better understand the power of Azure services.<\/p>\n\n\n\n

Content Delivery and Security Association Certification expansion and guidance release<\/h2>\n\n\n\n

In April of this year, Azure achieved certification according to the Content Delivery and Security Association\u2019s<\/a> (CDSA) Content Protection and Security<\/a> (CPS) standard. The CPS standard encompasses logical and physical security controls for digital content in the media and entertainment industry, and Azure\u2019s certification represents a critical opportunity for customers to move secure workflows into the cloud.<\/p>\n\n\n\n

The October audit includes a datacenter review and our move to an annual cycle. To accompany the audit report (which is available to customers under NDA), we have also published an implementation guide that will help customers understand the core features and policies that enable CPS standard compliance.<\/p>\n\n\n\n

Healthcare guide to designing secure health solutions released<\/h2>\n\n\n\n

For customers in the healthcare industry, a new Practical Guide to Designing Secure Health Solutions Using Microsoft Azure provides guidance for using cloud technologies including risk management, shared responsibilities, establishing an information security management system, understanding industry and local regulations, and establishing standard operating procedures. This whitepaper recommends thirteen security principles aligned to a standard information security management standard, such as ISO 27001, and standard development processes, such as Microsoft\u2019s Security Development Lifecycle (SDL).<\/p>\n\n\n\n

China Electronics Standardization Institute renewal<\/h2>\n\n\n\n

In October, Azure renewed support for the Chinese ideographic character set and encoding standard through GB18030<\/a>. It applies to the software processing of Chinese characters in the exchange, storage, transmission, display, input, and output of information. Microsoft Azure is certified as compliant with the mandatory part of this standard by the China Electronics Standardization Institute (CESI).<\/p>\n\n\n\n

Events<\/h2>\n\n\n\n

One thing you are going to see more of in the coming months is Azure in-person. Not only are there the Cloud Roadshow and Azure Tour in a city near you, but we\u2019ll be sponsoring events around the world for specific markets such as Financial Services, Healthcare, and Digital Media and Entertainment. Look us up at any one of these forums:<\/p>\n\n\n\n