Freely subscribe to our NEWSLETTER

Microsoft Office 365 can deliver compelling value and secure enterprise email infrastructure more effectively than many organisations could achieve independently. The partnership is aimed at addressing the concerns that risk-conscious organisations face when looking to benefit from email as a service and other applications delivered as a cloud-based service, including meeting cloud data residency, privacy and unauthorized disclosure requirements. For Australian businesses and agencies, privacy, security, legal and regulatory compliance concerns are paramount since personal data falling under the scope of Australian privacy law will be stored in jurisdictions that do not mandate comparable protection.

The guidance issued both by Australian industry bodies and government regulatory authorities such as the Australian Prudential Regulating Authority (APRA) in response to growing adoption of cloud-based services lays out a unifying principle to approaching cloud migration: understand and mitigate against the totality of data management risks before making the move to the cloud. Vaultive’s platform is designed to complement Microsoft’s cloud service provider security safeguards through an additional layer of data control capabilities based on persistent encryption and retention of the encryption keys by the organisation held accountable for data protection.

With Vaultive in place, businesses can maintain full control over their data regardless of where it is transmitted, stored and processed –enabling risk-conscious organisations to take advantage of the security advances delivered by Microsoft for the Office 365 environment. This functionality set enables organisations to address their responsibility related to the custody of personal information as delineated under the Australian Privacy Principles in two key aspects:

— Encrypting all personal information before it traverses a trusted boundary;

— Retaining the encryption keys to data resident on a third-party service, organisations can point to system controls to demonstrate fulfillment of the protection requirement.