Infrastructure Security

Physical security: Azure runs in geographically distributed and highly secured Microsoft facilities around the world. Each facility is designed to run 24 hours a day, 365 days a year, and employs multiple layers of security measures to help protect operations from power failure, physical intrusion, and network outages.

Monitoring and logging: Centralized monitoring, correlation, and analysis systems manage the large amount of information generated by devices within the Azure environment, providing continuous visibility and timely alerts to the teams that manage the service. See Azure infrastructure monitoring.

Update management: Azure uses integrated deployment systems to manage the distribution and installation of security updates for Microsoft software to help protect systems from unknown vulnerabilities.

Antivirius: Azure software components must go through a virus scan before deployment

Penetration testing: Microsoft conducts regular penetration testing to improve Azure security controls and processes. In addition, OnePlan performs our own penetration testing and code scans before and after every production update