Physical and Environmental Security

Q: Does your organization have adequate physical security access (e.g., visitor logs, badge readers, security guards, cameras, biometric readers, etc.) present in every location where our systems and/or data assets reside?

A: All physical security and environmental controls are managed by Microsoft, as we use Azure servers globally. Microsoft is responsible for data center access, security, and infrastructure protection.

Q: Are physical security and environmental controls in place for the data center and office buildings?

A: Physical security and environmental controls for data centers are managed by Microsoft, as we use Azure servers globally.

Q: If the cloud environment, data center, or server room is shared with other tenants, do the systems/equipment containing our data assets reside in a caged environment or locked cabinets?

A: Our infrastructure is hosted on Microsoft Azure, and all physical security measures are managed by Microsoft.

Q: Does your organization securely dispose of storage media containing sensitive information? Please describe the method used.

A: All storage media management and disposal are handled by Microsoft Azure, following their security and compliance standards.

Q: Are employees trained on physical security protocols, such as badge usage and visitor escort policies?

A: Our servers are hosted with Microsoft Azure, and only partners have access to our offices.

Q: How often are physical security audits conducted at your facilities?

A: Physical security is managed by Microsoft Azure, and our offices are restricted to partners only.