Office 365 - How secure is the information contained in emails and attachments?
Office 365 maintains the latest defenses against viruses and spam with Forefront® Online Protection for Exchange , a service that handles over 150 million messages to 8.5 million users around the world every day and is updated to address new virus and spam threats as soon as they appear. Microsoft helps to safeguard your data by hosting it in geographically-distributed data centers, with continuous data backup and premier disaster recovery capabilities.
Electronic communication, including e-mail, is vulnerable to access by unauthorized parties in transmission and in storage. It is recommended that electronic communication, including e-mail not be used for sensitive data. While Office 365 itself has the necessary controls for handling of sensitive information, the receiving email system and network must also be secure for the data to be fully protected. For UW-Madison HIPAA units, there are security policies specific to HIPAA. The School of Medicine and Public Health's electronic communication policy can be found here.