Microsoft 365 data at rest encryption

For companies seeking to migrate to Microsoft Cloud Services, Microsoft created a series of videos that speak a high level to common risk and control considerations. This specific video will walk you through how Microsoft 365 data is encrypted at rest, and dive into several encryption key management options, which are available to further meet business needs and compliance obligations.

For data at rest, Microsoft 365 uses various encryption technologies like BitLocker and service encryption. BitLocker offers volume-level encryption by encrypting the physical disk containing customer data. This helps reduce the risk of data being compromised if the physical disk is stolen. Service encryption provides an added layer of encryption beyond BitLocker at the application level, such as files and mailboxes in Microsoft 365. It also offers strong separation of server admin roles and customer data, while providing an added layer of protection against physical data theft.

Service encryption also provides the option for customers to control and manage their own encryption keys. For customers who have compliance requirements that call out certain key arrangements with their cloud service provider, we provide several encryption key management options to meet their business needs.

Please click below links to learn more about 6 other topics:

► Follow us on social:

#MicrosoftSecurity #RestEncryption #Microsoft365

[HighVisHarryHVH]

Really nice break down of what exactly "encryption at rest" means vs "encryption in transit". And how Microsoft's services are involved in in that process. Currently studying for the MS-900 exam, and found this really helpful. Thank you 👍

[bronisawsumlinski]

you can see that she doesn't know what she's talking about, but reads the text on the screen