Chapter 9: Understanding Security and Compliance Concepts with Microsoft 365

Data security and compliance with regulatory acts are important for nearly every organization. From privacy legislation (such as the European Union's (EU's) General Data Protection Regulation (GDPR) or the United States' (US) Health Insurance Portability and Accountability Act (HIPAA) to financial regulations (the Sarbanes-Oxley (SOX) Act) to industry compliance (Payment Card Industry Data Security Standard (PCI DSS)), organizations need to be mindful of how data is stored and transmitted.

With the rise of cybersecurity breaches and attacks, there is an urgent need to understand the proper configurations of available services and features. As we mentioned in Chapter 7,
Understanding Collaboration and Mobility with Microsoft 365, cloud services have changed the way organizations plan and deploy technology and secure data.

A clear understanding of Microsoft 365's out-of-the-box...