Microsoft Customer Lockbox Reviews

Microsoft Customer Lockbox Description

Most tasks involving operations, support, and troubleshooting carried out by Microsoft staff and their sub-processors typically do not necessitate access to customer data. In those infrequent instances where such access becomes necessary, Customer Lockbox for Microsoft Azure offers a system through which customers can evaluate and either approve or deny requests for access to their data. This feature is particularly utilized when a Microsoft engineer requires access to customer data, either due to a support ticket initiated by the customer or a problem detected by Microsoft itself. Activity logs serve to document Customer Lockbox interactions, which can be accessed in the Azure portal by selecting Activity Logs, allowing for a review of auditing information linked to these requests. Users have the option to filter the logs to find specific actions. Furthermore, a new baseline control (3.13) has been introduced in the Azure Security Benchmark, addressing the relevance of Customer Lockbox. This enhancement enables customers to leverage the benchmark to assess the applicability of Customer Lockbox for their services effectively. By doing so, organizations can ensure they maintain a high standard of data security and compliance.