Office 365: Microsoft’s latest IRAP assessment includes Teams, enables new collaboration scenarios at the PROTECTED level
Sergey Podwalny
?????????????????? ???????????????? ???????????????? ???????????????? ??????????????
In April 2018, following a rigorous IRAP assessment process, Microsoft Office 365 demonstrated its ability to operate at the PROTECTED level as defined in the Australian Government Information Security Manual (ISM). Since then, numerous Australian government organisations have successfully deployed Office 365 into environments operating PROTECTED level workloads.
We are delighted to announce that the latest assessment of the Microsoft Office 365 platform adds in Microsoft Teams to PROTECTED level, enabling modern collaboration scenarios for both new and existing customers.
This Office 365 announcement, builds on previous momentum which already resulted in 113 Azure platform services assessed to the PROTECTED level, that already included Power Apps, Power BI, Power Automate (formerly known as Microsoft Flow), Intune and Microsoft Cloud App Security, creating the most comprehensive PROTECTED assessed platform in Australia for securely empowering modern workforces.
In the coming months we will also be releasing a PROTECTED Office 365 configuration guidance document which builds upon the Microsoft 365 Enterprise deployment guidance by providing configuration considerations in alignment with the ISM controls required for operating at PROTECTED level.
Scope of upcoming guidance document
For the complete details of the Office 365 and Azure IRAP assessments, please visit the Australia-specific page of the Microsoft Service Trust Portal.
IRAP assessment process
We recommend customers independently risk assess their use of cloud services in accordance with the framework outlined in the Australian Government ISM’s “Applying a risk-based approach to cyber security” section.
Microsoft will continue to have Office 365 and Azure services independently IRAP assessed and will make the report and supporting documents available on the Australia-specific page of the Microsoft Service Trust Portal.