Cyber Security Blogs

Every year, Microsoft suppliers that handle Personal Data or Microsoft Confidential Data get a familiar email: it's time for SSPA reassessment. And every year, a number of those suppliers underestimate how fast 90 days actually goes. Here's the quick version of what's at stake. The Supplier Security and Privacy Assurance (SSPA) program requires an annual self-attestation confirming your organization still meets Microsoft's Data Protection Requirements (DPR). You get 90 days from the request to ...