Академический Документы
Профессиональный Документы
Культура Документы
Management Standards
ISO 22301:2012 standard (for Published in 2012 by the technical committee, ISO 22301:2012 is the first
purchase)
international standard for management systems that help ensure business
aka.ms/ISO-22301-standard
continuity. ISO 22301 is the premium standard for business continuity, and
Azure and Azure Government certification demonstrates conformance to rigorous practices to prevent,
Certificate of Registration (also mitigate, respond to, and recover from disruptive incidents.
covers Intune and Power BI.)
aka.ms/ISO22301cert Microsoft is the first hyperscale cloud service provider to receive the ISO
Azure resiliency technical guidance 22301 certification for business continuity management. The British Standards
Explains Azure’s shared responsibility Institute (BSI), an independent certification body, awarded this certification
model for business continuity. to Microsoft Azure, Microsoft Azure Government, Microsoft Intune, and
aka.ms/azure-resiliency-guide Microsoft Power BI after a stringent audit covering all aspects of their business
continuity processes. The audit covered the in-scope services listed below as
Microsoft Common Controls Hub well as Azure management features, the Azure Portal, and the systems used to
Compliance Framework
monitor, operate, and update the in-scope services.
aka.ms/MCCH
Where can I get the ISO 22301 audit reports and scope statements for
Microsoft services?
The Service Trust Portal (aka.ms/stphelp) provides independently audited
compliance reports, so that your auditors can compare Microsoft’s cloud
services results with your own legal and regulatory requirements.
Which Microsoft services are in scope for ISO 22301?
Covered services include:
▪▪ Azure:
▪▪ Compute: Batch, Cloud Services, RemoteApp, Service Fabric, Virtual Machine.
▪▪ Networking: Application Gateway, Express Route, Load Balancer, Traffic Manager,
Virtual Network, VPN Gateway.
▪▪ Storage: Backup, Site Recovery, Storage (blobs, queues, files, disks, tables, cool, and
premium), StorSimple.
▪▪ Web and mobile: App Services (API Apps, Mobile Apps, Web Apps), Media Services.
▪▪ Databases: Data Factory, DocumentDB, Redis Cache, SQL Database.
▪▪ Intelligence and analytics: Data Catalog, Data Factory, HDInsight, Machine Learning,
Stream Analytics.
▪▪ Internet of Things: Event Hubs, IoT Hub, Machine Learning, Notification Hubs, Stream
Analytics.
▪▪ Enterprise integration: API Management, BizTalk Services, Data Factory, Service Bus,
StorSimple.
▪▪ Security and identity: Access Control Service, Active Directory Device Registration,
Active Directory Gateway and Evolved Secure Token Service, Azure Active Directory
(including Microsoft Online Directory and Organizational Identity services), Azure Active
Directory Connect Health, Identity and Access Management (including Sync Fabric, Cloud
Password Single Sign-On, Self-Service Group Management, and Self-Service Password
Reset), Key Vault, Multi-Factor Authentication, Rights Management Service.
▪▪ Management and security: Automation, Azure Portal (including Azure IaaS
Experience), Azure Resource Manager, Backup, Log Analytics (formerly Operational
Insights), Microsoft Cloud App Security, Scheduler, Site Recovery, Traffic Manager.
▪▪ Azure Government:
▪▪ Compute: Cloud Services, Virtual Machines.
▪▪ Networking: Application Gateway, Express Route, Load Balancer, Traffic Manager,
Virtual Network, VPN Gateway.
▪▪ Storage: Storage (blobs, queues, files, disks, tables, cool, and premium).
▪▪ Web and mobile: App Service.
▪▪ Databases: SQL Database.
▪▪ Security and identity: Azure Active Directory, Key Vault.
▪▪ Intune: The cloud service portion of Microsoft Intune such as the Microsoft Intune Add-
on Product or a management service provided by Microsoft Intune such as Mobile Device
Management for Office 365.
January 2017