SOC Reports + Key Rotation

Question

As a Microsoft 365 Business Premium Client, where can I download a report which details how our data is encrypted in Transit and at Rest? We need it for a compliance activity. The report needs to include the key rotation cycle.

Answer 1

@Ansa Services

Here are some resources to help you understand the encryption capabilities:

1. Introduction to Encryption in Office 365: This whitepaper provides a foundational overview of the various encryption capabilities included in Office 365. You can download it from here.
2. Microsoft Purview Message Encryption: While this may not directly address your key rotation cycle requirement, it’s worth exploring. Microsoft Purview Message Encryption is available in Exchange Online PowerShell. You can verify that your Microsoft 365 tenant is properly configured for it. For more details, visit the Microsoft Purview page.
   https://answers.microsoft.com/en-us/msoffice/forum/all/microsoft-purview-message-encryption-on-m365/99dad6bd-ef91-40d3-b46b-8425585b9f1b
3. Secure Your Business Data: Microsoft provides best practices for securing business data, including encryption, sensitivity labels, and data loss prevention. You can find detailed information in the Microsoft 365 for business security best practices guide. Let me know if you have any questions, via comments.