Risk
7/23/2012
12:49 PM
Dark Reading
Dark Reading
Products and Releases
50%
50%

Microsoft Dynamics CRM Online Launches Trust Center

Web site provides in-depth information about privacy and security practices for Microsoft Dynamics CRM Online service

REDMOND, Wash., July 23, 2012 /PRNewswire/ -- Microsoft Corp. (Nasdaq "MSFT") today announced the availability of the Microsoft Dynamics CRM Online Trust Center, a website that provides in-depth information about the privacy and security practices for the Microsoft Dynamics CRM Online service. As data security and compliance are critical key considerations for organizations evaluating cloud services, the Microsoft Dynamics CRM Online Trust Center delivers to customers and potential customers high-level information about the privacy, transparency, independent verification and security features of Microsoft Dynamics CRM Online. This follows Microsoft Dynamics CRM Online's registration with the Cloud Security Alliance (CSA) Security, Trust & Assurance Registry (STAR) program, making Microsoft Dynamics CRM Online the first cloud CRM service to provide this level of transparency. Microsoft Dynamics CRM Online joins Microsoft Office 365 and Windows Azure with their Trust Centers and CSA STAR registrations, underscoring Microsoft's commitment to customers' data security and privacy.

"Customers have to be confident that their business solutions are meeting their high-level security features and privacy needs. The Microsoft Dynamics CRM Online Trust Center ensures transparency in how we operate Microsoft Dynamics CRM Online and handle these critical customer needs," said Dennis Michalis, general manager, Microsoft Dynamics CRM, Microsoft Corp. "Our customers need business solutions they can depend on, and the Microsoft Dynamics CRM Online Trust Center helps remove some of the anxiety they may have as they consider going to the cloud."

Gartner Inc. in the research report "Look Before You Leap Into Cloud Computing," published May 25, 2012, predicts that "by year-end 2016, more than 50 percent of Global 1000 companies will have stored customer-sensitive data in the public cloud." And it adds, "many enterprises are reaping great benefits from cloud computing, primarily in added business agility and cost savings.... However, as with any significant new form of technology, many eager new customers rush to take advantage of it before all the risks and risk mitigations have been fully explored."

"Enterprises should ensure that potential cloud service providers are trustworthy in areas of security, privacy and operational characteristics," said Gene Phifer, vice president distinguished analyst, Gartner. "Enterprises should perform due diligence on potential cloud service providers through the use of emerging cloud standards, certifications, cloud services brokers, questionnaires and interviews, and by generally 'doing your homework.' Transparency in a cloud vendor is key and security should be as big of a concern with online deployments as with on-premises deployments."

Designed to offer the performance, scalability, security and service levels organizations expect, Microsoft Dynamics CRM Online has built-in capabilities for compliance with a wide range of regulations and privacy mandates, including EU Safe Harbor, EU Model Clauses, ISO 27001, SSAE 16 SOC 1 Type II, and HIPAA-HITECH.

The Microsoft Dynamics CRM Online Trust Center is available at http://crm.dynamics.com/trust-center. Those who want to follow and engage with the Microsoft Dynamics CRM Twitter community can do so at @MSDynamicsCRM, using #MSDYNCRM and #CRM2011.

About Microsoft Dynamics

Microsoft Dynamics solutions empower your people to be more productive and your systems to last longer and scale as your business grows, while enabling you to derive the insights necessary to respond quickly in an ever-changing world of business.

About Microsoft

Founded in 1975, Microsoft (Nasdaq "MSFT") is the worldwide leader in software, services and solutions that help people and businesses realize their full potential.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading December Tech Digest
Experts weigh in on the pros and cons of end-user security training.
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-5395
Published: 2014-11-21
Multiple cross-site request forgery (CSRF) vulnerabilities in Huawei HiLink E3276 and E3236 TCPU before V200R002B470D13SP00C00 and WebUI before V100R007B100D03SP01C03, E5180s-22 before 21.270.21.00.00, and E586Bs-2 before 21.322.10.00.889 allow remote attackers to hijack the authentication of users ...

CVE-2014-7137
Published: 2014-11-21
Multiple SQL injection vulnerabilities in Dolibarr ERP/CRM before 3.6.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) contactid parameter in an addcontact action, (2) ligne parameter in a swapstatut action, or (3) project_ref parameter to projet/tasks/contact.php; (4...

CVE-2014-7871
Published: 2014-11-21
SQL injection vulnerability in Open-Xchange (OX) AppSuite before 7.4.2-rev36 and 7.6.x before 7.6.0-rev23 allows remote authenticated users to execute arbitrary SQL commands via a crafted jslob API call.

CVE-2014-8090
Published: 2014-11-21
The REXML parser in Ruby 1.9.x before 1.9.3 patchlevel 551, 2.0.x before 2.0.0 patchlevel 598, and 2.1.x before 2.1.5 allows remote attackers to cause a denial of service (CPU and memory consumption) a crafted XML document containing an empty string in an entity that is used in a large number of nes...

CVE-2014-8469
Published: 2014-11-21
Cross-site scripting (XSS) vulnerability in Guests/Boots in AdminCP in Moxi9 PHPFox before 4 Beta allows remote attackers to inject arbitrary web script or HTML via the User-Agent header.

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
Now that the holiday season is about to begin both online and in stores, will this be yet another season of nonstop gifting to cybercriminals?