Not bad, but something is still missing
I see no explanation concerning security against NSA snooping and National Security Letters for non-US companies.
So, Microsoft, care to clarify on that point ?
Microsoft has issued guidelines about Azure security that spell out when a problem is your problem and when a problem is Microsoft's problem. Two documents explain Redmond's approach to problem-solving. The first is called Shared Responsibilities for Cloud Computing (PDF) and explains how Microsoft divides responsibility for …
What Microsoft has done is defined where the boundaries are. It's like renting a building, you have the responsibilities for the equipment you put in the building but not he building. Understanding the boundaries of responsibilities is a good start. Now if these companies would understand the need for a proper security and contingency plan, then maybe things would be more secure.
Biting the hand that feeds IT © 1998–2021