Windows Azure Security Evolution Platform Developer Build (Build: 5.6.50428.7875)2013-08-22T16:33:00ZNew Windows Azure Network Security Whitepaper<p>Download the new <a href="" target="_blank">Windows Azure Network Security Whitepaper</a>.&nbsp;</p> <p>Windows Azure networking provides the infrastructure necessary to securely connect your virtual machines to one another, as well as bridge between the cloud and your on-premises data center.</p> <p>This white paper seeks to uncover these inner-workings and give insights on how customers can take advantage of the platform&rsquo;s native features to best protect their information assets. The paragraph below highlights some of what you will see in this white paper:</p> <p>Fundamental to any shared cloud architecture is the isolation provided for each customer. In Windows Azure, a customer subscription can include multiple deployments, and each deployment can contain multiple VMs. Windows Azure provides network isolation at several points:</p> <ul> <li>Deployment: Each deployment is isolated from other deployments. Multiple VMs within a deployment are allowed to communicate with each other through private IP addresses.</li> <li>Virtual Network: Multiple deployments (inside the same subscription) can be assigned to the same virtual network, and then allowed to communicate with each other through private IP addresses. Each virtual network is isolated from other virtual networks.</li> </ul> <p>An example of such a topology is shown in Figure 1.</p> <p><a href=""><img src="" alt="" border="0" /></a></p> <p><strong>Figure 1. An example of isolated multi-tier IaaS applications hosted within Windows Azure.</strong></p><div style="clear:both;"></div><img src="" width="1" height="1">Ashwin Palekar - MSFT Azure Receives SOC 2 Type 2 report with CSA CCM Attestation<p>Today we&rsquo;re announcing that Microsoft&rsquo;s public auditor Deloitte &amp; Touche LLP, has issued a Service Organization Control (SOC) 2 Type 2 report for Windows Azure in security, availability and confidentiality trust principles and the <a href="">Cloud Security Alliance</a> (CSA)&nbsp;Cloud Control Matrix.&nbsp; Windows Azure is the first cloud services provider to receive the attestation to CCM by an independent, registered public accounting firm.</p> <p>Last February at the <a href="">RSA Conference</a>, CSA released a position paper on the <a href="">American Institute of Certified Public Accountants</a> (&ldquo;AICPA&rdquo;) reporting framework, as a means of providing guidance on selecting the most appropriate audit reporting options when evaluating and selecting cloud service providers. &nbsp;In the position paper, the CSA highlights that leveraging the criteria in the CSA Cloud Controls Matrix along with a SOC report is likely to meet the assurance and reporting needs of the majority of cloud services users.&nbsp; The <a href="">CSA&rsquo;s position</a> is that by referring to the combined criteria in the report, customers have increased confidence the service meets a broad range of international requirements while reducing the time and costs associated with understanding and evaluating cloud service providers.</p> <p>The Windows Azure security, privacy and compliance strategy reflects our commitment to deliver world-class solutions and resources that help customers understand what to expect when they use Windows Azure.&nbsp; The Windows Azure <a href=";clcid=0x409">Standard Response to Request for Information: Security and Privacy</a> and our <a href="">Cloud Security Alliance STAR</a> <a href="">submission</a> are the most frequently requested resources at the <a href="">Windows Azure Trust Center</a>.&nbsp; We understand these resources are valuable not only in evaluating service providers, but informing and supporting our customers&rsquo; compliance programs where they rely on Windows Azure&rsquo;s security controls and processes to safeguard their data and applications.</p> <p>We&rsquo;ve developed some important insights in undertaking this industry-first approach to simultaneous audit and attestation against multiple standards.&nbsp; I&rsquo;ve shared some of those insights with our Chief Security Officers&rsquo; Council and they advised me to take a more direct approach engaging in external dialogue and shining a light on the innovation we&rsquo;re driving in Azure for compliance in cloud services to share ideas and resources with other practitioners.</p> <p>In upcoming posts, I&rsquo;ll share more insight to the Windows Azure security and compliance roadmap, our controls framework, integration through the engineering life cycle, execution across the Azure platform and partnerships with our internal customers like O365 and Global Foundation Services.&nbsp; In the meantime, check out the <a href="">Windows Azure Trust Center</a> or follow me on twitter @msftlori.</p><div style="clear:both;"></div><img src="" width="1" height="1">Lori Woehler