Microsoft Has a Service Continuity Plan in Place to Address the COVID-19 Outbreak

Microsoft takes a broad approach to service continuity, including potential effects of an outbreak such as COVID-19. While there is currently no foreseen impact to Microsoft’s operation of our services, we wanted to provide some detail regarding our preparedness should the situation change. Recognizing customers will have plans in place for enabling remote work in a situation like this, we are providing guidance regarding best practices under the “Actions you can take” section that will help maximize the benefits of Microsoft 365.

Microsoft has a comprehensive business continuity program, details of which can be found in a PDF here (file name: “Microsoft Cloud – Enterprise Business Continuity Management (EBCM) Program”). This document outlines our efforts across a multitude of scenarios including pandemic response.

Specific to COVID-19, we are providing an outline of key preparedness activities to ensure continued service delivery during this event. The three areas of focus during any situation that challenges normal operations are as follows:

• Impact to systems – does the event have a potential impact on our systems used to deliver and support Microsoft 365?
• Impact to location – are the locations from which we deliver and support service effected and what is our response?
• Impact to people – are we prepared should there be impact to the individuals responsible for delivering service to our customers?

While the following provides the high-level efforts in each of these areas, there are significantly more activities that relate to our business continuity efforts for Microsoft 365 that are beyond the scope of this communication.

Impact to systems – First and foremost there are no known impacts to Microsoft 365 services. Heightened awareness is in place for the following areas:

• Service scale and operations – One of the benefits of a cloud service is the ability to scale dynamically, including utilization of our significant supply chain, reallocation of resources between services, and redistribution of load. We have seen an increase in the utilization of Teams which we have responded to and continue to monitor closely.
• Supporting systems – A general principle of cloud service operations is remote management and administration. We see no effect to our ability to manage the systems used to support Microsoft 365, and have confirmed adequate capacity for staff to work remotely at scale.
• External systems – We are working across industry with a focus on networking infrastructure. We are seeing some utilization issues with public ingress / egress to China, but otherwise there are no issues identified.

Impact to location – Our services are designed for remote administration; however, with the recent news that the greater Seattle, Washington area represents a higher incidence of COVID-19 we wanted to provide specific details around support of the service should Microsoft engineers be constrained to work from home.

• Microsoft employs a security first approach to administering Microsoft 365 service. Each engineering resource that is accountable for managing the service has the ability to securely administer the service without direct access to the corporate location.
• Microsoft maintains multiple geographic locations outside the Seattle area with individuals who are capable of maintaining and managing the service.

People – As the largest provider of commercial services we have the capability of ensuring continued operations with multiple subject matter experts in each discipline, with geographic diversity being a consideration.

• Employees responsible for managing the service all have access to needed resources to take action from home or the office.
• A “deep” on-call rotation allows for sustained support should issues arise and ensures that resources are available should individuals fall ill.

While Microsoft puts the safety and well-being of its employees at the forefront, our “defense-in-depth” approach is expected to allow for uninterrupted service operation should the virus spread significantly.

We will make updates to this Message Center post should the situation change.

Actions you can take:

• Follow a similar program to the above ensuring consideration for your systems, people and work locations.

• If your organization is looking to accelerate its move to Teams, overview information regarding Teams can be found here.

• If you do have an increase in remote work, follow our best practices to maximize your use of Teams.

• Ensure your organization’s network is prepared to support the use of Teams by following these recommendations.