Microsoft will select certain vendors to undergo an independent verification of compliance with the DPR. This assessment against the DPR will examine controls in place as a of point in time to determine compliance with the applicable requirements. Suppliers will need to provide their completed self-assessment questionnaire that was previously provided to Microsoft. The examination will result in an attestation report that includes an opinion letter, brief overview of the scope of the environment included in the examination as well as the results of Schellman’s verification of the organization’s design of controls and whether the organization is in compliance with the applicable DPR requirements.
