Announcing Customer Lockbox for Office 365


This post was written by Vijay Kumar, senior product marketing manager, and Raji Dani, principal program manager for the Office 365 Security team.

As a cloud services provider, we recognize that organizations understandably want to have full control over access to their content stored in cloud services. Today at RSA, we announcedCustomer Lockbox for Office 365, a new capability designed to provide customers with unprecedented control over their content in the service. Customer Lockbox gives customers explicit control in the very rare instances when a Microsoft engineer may need access to customer content to resolve a customer issue.

In our efforts to maximize data security and privacy for Office 365 customers, we have engineered the service to require nearly zero interaction with customer content by Microsoft employees.  Nearly all service operations performed by Microsoft are fully automated and the human involvement is highly controlled and abstracted away from customer content. As a result, only in rare cases—such as when troubleshooting a customer issue with mailbox or document contents—does a Microsoft engineer have any reason to access customer content in Office 365.

Microsoft Engineers do not have standing access to any service operation.  All access is obtained through a rigorous access control technology called Lockbox. Today, Lockbox enforces access control through multiple levels of approval within Microsoft, providing just-in-time access with  limited and time-bound authorization. In addition, all access control activities in the service are logged and audited.

With today’s announcement, we are bringing customers into the Lockbox approval process for instances involving access to customer content. Use of the Customer Lockbox feature ensures that Microsoft engineer does not get access to the customer’s content without customer’s explicit approval. When the customer gets the request for access, they can scrutinize the request and either approve or reject it. Until the request is approved, the Microsoft engineer will not be granted access.

Announcing Customer Lockbox for Office 365 1

Of course transparency and control are important in achieving trust, and all Customer Lockbox activity will be available to customers via the Office 365 Management Activity logs for easy integration into customer security monitoring and reporting systems.

Customer Lockbox will be available for Exchange Online by the end of 2015, and for SharePoint Online by the first quarter of 2016.

Read More :  http://blogs.office.com/2015/04/21/announcing-customer-lockbox-for-office-365/

Published by Abheek Dutta

A perennial thrill-seeker with an avid interest in transforming and improving lives around the globe through the wonderful gift of technology, I am the Senior Vice President of Henson Group . My specialties include Leadership, problem-solving, and putting cutting-edge technology (Cloud, Artificial Intelligence, Machine Learning) in the hands of corporates, startups, and professionals. I have been obsessed with the idea of using technology to solve real-world problems. Having previously worked with global software giants like TCS and IBM, I now usually sit at my office at the World Trade Center, New York and Chandigarh , India. Among my greatest achievements, increasing the revenue of Henson Group by ten-folds in the past two years, remains my favorite along with the fact that Henson Group’s India center has now become ‘a center of excellence’ with its entire technical team being Microsoft certified. On the delivery side, I helped Henson Group attain the prestigious “ Azure Expert MSP Certification “ with Microsoft . Hailing from Jammu, my team has grown from five to 150 employees and associates in just two years. Even during COVID-19 era, our growth has soared while helping corporates, industries and startups to tide over many hurdles and challenges. Henson Group is recently featured at rank 132 in the Inc. 5000 Rating. Skillsets: Cloud Services, Managed Services Provider (MSP), Computers & Networks, Artificial Intelligence, Machine Learning, Project management, Leadership , Cyber Security Mr. Dutta manages and monitors the performance of consultants and partners on engagements, communicating with the account executive, project teams, and customers. Works in close collaboration with the Microsoft project manager, providing hands-on project management expertise as required. Mr. Dutta provides direct oversight over the MSP Client Operations team responsible for managing MSP relationships with existing MSP clients and day to day operations of these accounts. Mr. Dutta oversees the Centralized Delivery Team that is responsible for high volume cloud migrations and MSP delivery to current clients. Team consists of over 120+ engineers and project managers.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

%d bloggers like this: