Skip to main content
Microsoft SSPA/DPR

Microsoft Supplier Security & Privacy Assurance Program (SSPA) Consulting Advisory | Assessments | Data Protection Requirements (DPR)

Microsoft Supplier Requirements

Centris offers numerous services relating to Microsoft’s Supplier Security & Privacy Assurance Program (SSPA) Supplier Data Protection Requirements (MS DPR), including gap assessments, remediation services, independent reports, and more. A large part of complying with the MS DPR provisions within Microsoft’s SSPA is contingent upon having well-formalized, documented data privacy and information security policies, procedures, and processes – measures that Centris can assist with.

Microsoft SSPA DPR Help When You Need it Most

Centris offers comprehensive services for helping suppliers meet all applicable ‘sections’ as outlined in the Microsoft Supplier Data Protection Requirements (MS DPR).

Choice and Consent:

Centris can develop all required data privacy policies, procedures, and processes relating to the ‘consent’ requirements. Specifically, Centris can help suppliers in developing documentation that shows evidence of choice and consent measures in place.

Collection:

Centris can develop all required data privacy policies, procedures, and processes relating to the ‘collection’ requirements. Specifically, Centris can help suppliers in developing documentation that shows evidence of collection measures in place.

Retention:

Centris can develop data retention and disposal policies, procedures, and processes and any other retention documentation as needed.

Data Subjects:

Data subjects have far-reaching rights as outlined by the MS DPR – and other data privacy regulations. As such, Centris can develop all required data subjects rights policies, procedures, and processes.

CENTRIS

Leaders in Security & Regulatory Compliance

Risk Strategies & Methodologies
Risk management planning reduces exposure to a wide-range of issues that could have detrimental effects on a business. Not knowing, planning, or responding to risks and related issues can leave an organization with few options in combating risks when they actually surface.
CENTRIS Advisory Methods
Strategic Planning & Integration
Every organization is moving towards a digitized business model, so isn’t it time to strategize on some of the most critically important elements for your business?
Explore CENTRIS Strategies
Regulatory Compliance Experts
Build scalable, adaptable, and efficient compliance solutions for increased organizational efficiency, while also improving core InfoSec, cybersecurity, operational and data privacy controls and best practices.
Regulatory Compliance For All Industries

Microsoft Supplier Data Protection Requirements

Per Microsoft, “The Microsoft Supplier Data Protection Requirements” apply to each Microsoft supplier that Processes Personal Data or Microsoft Confidential Data in connection with that supplier’s performance (e.g., provision of services, software licenses, cloud services) under the terms of its contract with Microsoft.” When reading the details of the MS DPR document, it’s full of requirements pertaining to data subject rights and information security.

Disclosure to Third-Parties:

With strict provisions mandated on suppliers regarding disclosure to third-parties, Centris can develop a comprehensive Third-Party Risk Management (TPRM) program for ensuring all required MS DPR mandates for ‘Disclosure to Third Parties’ are being met.

Monitoring and Enforcement:

Centris can develop an incident response plan that includes measures for identifying and responding to incidents, along with numerous other supporting measures.

Security:

Per the MS DPR, “The supplier must establish, implement, and maintain an information security program that includes policies and procedures…”. Centris can develop all required information security and cybersecurity policies, procedures, and processes. From access control to vulnerability management, whatever the InfoSec requirement is per the MS DPR, we have you covered. To be clear, Section J (Security) of the MS DPR is the most comprehensive and in-depth set of requirements put forth on suppliers. With Centris, we offer a full lifecycle of services for developing all required information security measures.

With Centris, we offer a wide range of data privacy, cybersecurity, and regulatory compliance solutions and services, including assessments & programs, data governance, data mapping, PIA, DPIA, GDPR assessments, CCPA/CPRA assessments, international international privacy assessments, U.S. state privacy assessments, EU Cloud Code of Conduct, Microsoft SSPA/DPR, along with data privacy programs.

"The scope of the SSPA Program covers all suppliers globally that process Personal Data or Microsoft Confidential Data in connection with that supplier’s performance under the terms of its contract with Microsoft."
- Microsoft

Why Centris for Microsoft Supplier Data Protection Requirements Assistance?

  • Proven methodology that’s quick, comprehensive, and with fixed-fee pricing.
  • Experts at remediating privacy and security gaps, along with documentation deficiencies.
  • Deep experience in working with all industries and sectors relating to privacy and security.

Additional Related Services

Customized Data Privacy Programs | Data Privacy Cons...

Growing cybersecurity threats, coupled with increased laws and regulations are forcing organizations to truly take the time in assessing – and documenting – how they collect, use, share & disclose, store, protect, retain, and dispose of their data...
Read this article

EU Cloud Data Protection Code of Conduct Gap Assessm...

The EU Data Protection Code of Conduct for Cloud Service Providers, simply known as the EU Cloud Code of Conduct, is a framework consisting of a set of requirements for Cloud Service Providers (CSP) supported by a Control Catalogue. This is impor...
Read this article

U.S. State Data Privacy Assessments, Consulting and ...

Almost every state is now following in the footsteps of California in developing comprehensive laws regarding an individual’s data privacy rights. In the near future, it’s quite possible that every state will adopt meaningful data privacy laws, a...
Read this article

International Data Privacy Assessments for U.S. and ...

While most of the world is focusing on the likes of the General Data Protection Regulation (GDPR), along with the California Consumer Privacy Act (CCPA), there’s much more to data privacy than these two well-known pieces of legislation. Canada, B...
Read this article

CCPA & CPRA Gap Assessments for Business in Californ...

The California Consumer Privacy Act (CCPA) is without question landmark legislation enacted to give consumers greatly enhanced privacy rights and protection clauses within the state of California. As an organization, if you’re doing business in t...
Read this article

GDPR Assessments for Controllers and Processors

Centris offers GDPR gap assessments for organizations all throughout North America seeking assistance with what’s arguably the most demanding and comprehensive data privacy regulation in the world. GDPR compliance for U.S. companies has hit our sh...
Read this article

Data Protection Impact Assessments (DPIA) | GDPR Con...

The General Data Protection Regulation (GDPR), under Article 35, requires, under certain circumstances, that a Data Protection Impact Assessment (DPIA) be performed by controllers if certain conditions exist. Specifically, “Where a type of process...
Read this article

Privacy Impact Assessments (PIA) | Minimize Privacy ...

The safety and security of all types of data is now front and center in today’s business arena due to growing cybersecurity threats, coupled with increased data privacy laws and regulations. With Centris, our PIA process is efficient, yet compre...
Read this article

Data Mapping for Security and Privacy | Improve Deci...

The safety and security of data (all types and all formats) is now more important than ever, thanks in large part to growing data privacy and cybersecurity regulations that are impacting organizations all throughout the globe. The General Data Pro...
Read this article

Data Governance Plan and Consulting Services | PIA, ...

When performed correctly, a quality data governance assessment provides organizations with an actionable roadmap for designing and implementing a sustainable data governance program that ultimately improves efficiency, promotes transparency, enabl...
Read this article

    Protect Your Digital Systems & Ensure Compliance at All Levels

    From robust security and compliance solutions to risk analysis and corporate strategy - partner with CENTRIS for enterprise resilience.

    Let's talk about your business - Contact CENTRIS Today