Understand Microsoft Online Services subprocessor management

Risk Practitioner
Privacy Manager
Microsoft 365

Learn how Microsoft Online Services procures, monitors, and manages subprocessors to help protect data from unauthorized access and inappropriate use.

Learning objectives

Upon completion of this module, you should be able to:

  • Explain how the Supplier Security and Privacy Assurance (SSPA) program helps Microsoft online services protect customer data and personal data.
  • List the types of subprocessors utilized by Microsoft and the access controls employed by each type.
  • Describe how the additional subprocessor requirements of Microsoft's business units limit the number of approved subprocessors and provides and extra layer of protection.
  • List subprocessor onboarding and ongoing subprocessor verification requirements required by the SSPA program.
  • Describe Microsoft commitments to protecting customer data and personal data when a supplier contract ends.