5.1.1. Service Trust Portal Offerings
💡 First Principle: The Service Trust Portal is Microsoft's central repository of audit reports, compliance certifications, and security documentation about Microsoft's own cloud services — giving customers the independently-verified evidence needed to assess Microsoft's side of the shared responsibility model without having to request it individually.
This includes things like independent audit reports (SOC reports, ISO certifications) and detailed documentation about how Microsoft implements controls for various regulatory frameworks — exactly the kind of evidence an organization's own compliance team needs when they, in turn, have to prove their compliance to regulators or customers.
⚠️ Exam Trap: The Service Trust Portal documents Microsoft's own compliance posture as a cloud provider — it is not a tool for managing or assessing a customer's own organizational compliance (that's Compliance Manager, 5.2.2).
Reflection Question: Why would a customer's own compliance team need access to independently-audited evidence about Microsoft's infrastructure, rather than simply trusting Microsoft's marketing claims?
