Audit of the security and usability of Microsoft 365
Bern, 21.10.2026 — The Federal Chancellery's Digital Transformation and ICT Steering Sector (FCh DTI) rolled out the Microsoft 365 (M365) digital work platform across the Federal Administration by the end of 2025. M365 is intended to enable a more efficient, cloud-based work environment, but it also presents challenges in terms of information security, data protection, governance and, not least, data sovereignty.
The SFAO examined whether the FCh DTI is safeguarding data and information security during use, and whether the additional features can also be used effectively. The Federal Office of Information Technology, Systems and Telecommunication (FOITT) has implemented the platform in accordance with good practice and established security controls appropriate to its currently restricted use. However, several key enhancements remain outstanding. M365 makes additional features available to Federal Administration employees.