Is My Office 365 GDPR Compliant? : Security Issues in Authentication and Administration
Abstrakti
The General Data Protection Regulation, commonly referred as GDPR, will be enforced in all European Union
countries in May 2018. GDPR sets requirements for processing EU citizens’ personal data regardless of the
physical location of the organisation processing the data. Over 40 percent of European organisations are using
Office 365. Microsoft claims that Office 365 service is GDPR compliant, and has provided tools to help Office
365 customers to ensure their GDPR compliancy. In this paper, we present some security issues related to the
very foundation of Office 365 service, namely Azure Active Directory and administrative tools, and assess
their GDPR compliancy. Our findings reveal that personal data stored in Office 365 is subject to undetectable
security breaches, preventing organisations to be GDPR compliant. We also propose actions to take to
minimise the impact of the security issues.
Päätekijät
Aineistotyyppi
Konferenssit
Artikkeli konferenssijulkaisussa
Julkaistu
2018
Aiheet
Julkaisu tutkimustietojärjestelmässä
Julkaisija
SCITEPRESS Science And Technology Publications
Julkaisun pysyvä osoite
https://urn.fi/URN:NBN:fi:jyu-201811154728Käytä tätä linkitykseen
Emojulkaisun ISBN
978-989-758-298-1
Vertaisarvioinnin tila
Vertaisarvioitu
DOI
https://doi.org/10.5220/0006770602990305
Konferenssi
International Conference on Enterprise Information Systems
Kieli
englanti
Kuuluu julkaisuun
ICEIS 2018 : Proceedings of the 20th International Conference on Enterprise Information Systems. Volume 2
Viite
- Syynimaa, N., & Viitanen, T. (2018). Is My Office 365 GDPR Compliant? : Security Issues in Authentication and Administration. In S. Hammoudi, M. Smialek, O. Camp, & J. Filipe (Eds.), ICEIS 2018 : Proceedings of the 20th International Conference on Enterprise Information Systems. Volume 2 (pp. 299-305). SCITEPRESS Science And Technology Publications. https://doi.org/10.5220/0006770602990305
Copyright© Syynimaa & Viitanen & SCITEPRESS, 2018.