Audit Guideline
Audit Guideline
October 1, 2019
Re: Additional communications related to internal controls represented in the 2019 Microsoft Azure
and Azure Government SOC1 and SOC2 Type 2 reports.
Microsoft recognizes the need to maintain an appropriate internal control environment and report on
the effectiveness of, as well as material changes to, its systems of internal control. This letter
confirms that, based on our records, and to the best of our knowledge, for the period of July 1, 2019
through September 30, 2019, we are not aware of any material changes to the system of internal
control provided by Microsoft Azure and Azure Government, nor has anything come to our attention
that we believe would impact conclusions reached in the 2019 Microsoft Azure and Azure Government
SOC1 and SOC2 Type 2 reports that you have received.
This letter is not intended as a substitute for the 2019 Microsoft Azure and Azure Government SOC1
and SOC2 Type 2 reports, or to provide you with a certification of Microsoft Azure and Azure
Government internal controls, or to suggest to you that Microsoft Azure and Azure Government have
performed a separate evaluation of their respective controls for the purposes of producing this letter.
Sincerely,
Tom Keane
Corporate Vice President, Azure Global