Are the Business Productivity Online Standard Suite services Sarbanes-Oxley (SOX) compliant?
The Dedicated version of the Business Productivity Online Standard Suite supports your Sarbanes-Oxley compliance objectives by underpinning its services with a comprehensive set of controls that align with your SOX requirements. The design and operational effectiveness of these controls are internally assessed by our staff and external auditors on an ongoing basis as well as subject to an independent SAS 70 Type II audit conducted each year. The Standard version of the Business Productivity Online Standard Suite will be seeking a SAS 70 Type II audit attesting to the effectiveness of Microsoft’s internal controls. While our U.S. datacentres maintain a SAS 70 Type II for the physical controls of each facility, the Services (Live Meeting, EHS, Exchange Online, SharePoint Online and Office Communications Online) themselves do not. Live Meeting maintains both the CyberTrust Service Provider Certification and the CyberTrust Application Certification, which surpasses the control requirements
