Is My Office 365 GDPR Compliant? - Security Issues in Authentication and Administration

Nestori Syynimaa, Tessa Viitanen

2018

Abstract

The General Data Protection Regulation, commonly referred as GDPR, will be enforced in all European Union countries in May 2018. GDPR sets requirements for processing EU citizens’ personal data regardless of the physical location of the organisation processing the data. Over 40 percent of European organisations are using Office 365. Microsoft claims that Office 365 service is GDPR compliant, and has provided tools to help Office 365 customers to ensure their GDPR compliancy. In this paper, we present some security issues related to the very foundation of Office 365 service, namely Azure Active Directory and administrative tools, and assess their GDPR compliancy. Our findings reveal that personal data stored in Office 365 is subject to undetectable security breaches, preventing organisations to be GDPR compliant. We also propose actions to take to minimise the impact of the security issues.

Paper Citation

in Harvard Style

Syynimaa N. and Viitanen T. (2018). Is My Office 365 GDPR Compliant? - Security Issues in Authentication and Administration.In Proceedings of the 20th International Conference on Enterprise Information Systems - Volume 2: ICEIS, ISBN 978-989-758-298-1, pages 299-305. DOI: 10.5220/0006770602990305

in Bibtex Style

@conference{iceis18,
author={Nestori Syynimaa and Tessa Viitanen},
title={Is My Office 365 GDPR Compliant? - Security Issues in Authentication and Administration},
booktitle={Proceedings of the 20th International Conference on Enterprise Information Systems - Volume 2: ICEIS,},
year={2018},
pages={299-305},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0006770602990305},
isbn={978-989-758-298-1},
}

in EndNote Style

TY - CONF

JO - Proceedings of the 20th International Conference on Enterprise Information Systems - Volume 2: ICEIS,
TI - Is My Office 365 GDPR Compliant? - Security Issues in Authentication and Administration
SN - 978-989-758-298-1
AU - Syynimaa N.
AU - Viitanen T.
PY - 2018
SP - 299
EP - 305
DO - 10.5220/0006770602990305