Audit of the security and usability of Microsoft 365
The Federal Chancellery’s Digital Transformation and ICT Steering Sector (DTI) introduced the Microsoft 365 (M365) digital workplace platform throughout the Federal Administration by the end of 2025. M365 is intended to enable a more efficient, cloud-based working environment, but also brings challenges in information security, data protection, governance and, not least, data sovereignty. The Swiss Federal Audit Office (SFAO) examined whether the DTI Sector ensures the security of data and information when the platform is used and whether the additional functions can actually be used effectively. The Federal Office of Information Technology, Systems and Telecommunication (FOITT) set up the platform professionally and put in place appropriate security measures for its currently restricted use, although key further developments are still outstanding. M365 provides Federal Administration employees with additional functions.