60% cited concerns around data security as a barrier to adoption 45% concerned that the cloud would result in a lack of data control Security Privacy 94% experienced security benefits they didn’t previously have on-premise 62% said privacy protection increased as a result of moving to the cloud

Design for privacyBuilt-in featuresProtect data in operations Provide transparency and choice

Program Design for Privacy Commitments People

Program Design for Privacy Commitments ProcessPeople

Program Design for Privacy Commitments TechnologyProcessPeople

Program Design for Privacy Commitments

Built-in features Redundancy & BackupData EncryptionIdentity – Azure ADData Location Customer Control

Note: Microsoft Azure data centers, Australia – Q2 FY15 GEOREGION Asia Pacific Asia Pacific East (Hong Kong) Asia Pacific Southeast (Singapore) Europe Europe North (Ireland) Europe West (Netherlands) United States US North Central (Illinois) US South Central (Texas) US East (Virginia) US West (California) Japan Japan East (Saitama Prefecture) Japan West (Osaka Prefecture) Brazil South (Preview) Sao Paulo State Data location

Data redundancy Locally redundant storage

Geo-redundant storage Data redundancy

Locations East Asia Southeast Asia North Europe West Europe East US North Central US South Central US West US Japan East Japan West Brazil South (Preview)

Enable single sign on across Microsoft online services and a world of other cloud applications Extend and synchronize on-premises directories to the cloud Centrally manage user accounts in the cloud Manage identities and access to cloud applications

Enable single sign on across Microsoft online services and a world of other cloud applications Extend and synchronize on-premises directories to the cloud Centrally manage user accounts in the cloud

Security reporting that tracks inconsistent access patterns Built-in security features Step up to Multi-Factor Authentication

Security reporting that tracks inconsistent access patterns Built-in security features Step up to Multi-Factor Authentication

Data encryption

Built-in features Data protection at rest Data Protection in motion Data protection at rest

Protect data in operations DataApplicationNetworkHost Security Identity & Access ManagementPhysical 24x7x365 Incident Response

Protect data in operations Data isolationLimited access MFA for service access Auditing of all operator access and actions Zero standing permissions in the service Automatic Microsoft staff account deletion Staff background checks, training

Protect data in operations Certification and Attestations Controls FrameworkPredictable Audit Schedule Industry Standards and Regulations &

With 76,000 employees, one of the U.S.’s largest diversified healthcare providers. Acquired a provider with 22,000 employees, and a disparate system Aggressive timeline for technology standardization Needed a single collaboration platform, geared for mobile, that ensures privacy of patient data Selected Office 365 Exchange, SharePoint, and Lync Online Flexible licenses and costs based on employee role and need Met security and privacy needs for regulatory compliance Implemented out-of-the-box retention, legal holds, eDiscovery, and encryption features Gained access to improved collaboration tools Single platform that met all group needs, with a single identity management solution Greater control of data through privacy and protection features Facilitates regulatory compliance Healthcare/Healthcare-Provider-Chooses-Office-365-to-Meet-Compliance-Needs-Boost- Communications/

Major investment firm with an international presence Need to provide employees with access to applications anywhere in the world Solution must been stringent privacy and security laws and regulations Limited IT resources to support on-prem IT solutions Selected Office 365 Exchange, SharePoint, and Lync Online Leveraged a Microsoft partner to help implement the solution in a streamlined, compliant manner Improved availability, reducing downtime Lower total cost of ownership through reduced support, license costs Improved privacy and security through greater physical data security, logical controls Encryptions features further enhance privacy Holding/Holding-Company-Increases-Productivity-and-Cuts-Costs-by-Implementing-a- Cloud-Solution/

Consulting firm with more than 3,000 staff in 57 offices across 40 countries Contact information stored in personal Outlook address books, four different CRM systems Inefficient processes for identifying clients and targeting outreach Developed new Client Connect solution built on Dynamics CRM Online Migrated data from disparate platforms Leveraged functionality to control privacy and usage of contacts contributed to the system 95% adoption rate by executives More comprehensive view of clients, efficient targeting for marketing efforts Gained trust of end users by assuring data privacy, thus increasing adoption Consulting-Firm-Improves-Marketing-and-Encourages-Teamwork-with-CRM- Solution/

Provide transparency and choice Data classification Client and end point protection Identity and access Application level controls Network controls Host security Physical security IaaSPaaSSaaS

Provide transparency and choice

Design for privacyBuilt-in features Protect data in operations Provide transparency and choice