Safety is a shared responsibility

Shared responsibility model

In a cloud-based SaaS solution like MyDesk, security is a shared responsibility between MyDesk and the customer. MyDesk is responsible for the security of the platform, infrastructure and application. The customer is responsible for the security of his use of the platform.

The customer's responsibility for user administration

The customer is responsible for managing user access to MyDesk, including:

• Creation and deletion of user accounts
• Assigning correct roles and rights
• Deprovisioning access upon resignation
• Regular review of user access
• Reporting of suspicious activity

Identity policies and MFA

Customer is responsible for configuring and enforcing appropriate identity policies in its Microsoft Entra ID tenant, including MFA requirements, conditional access policies, and password policies.

Configuration and settings

Customer is responsible for properly configuring MyDesk in accordance with its security requirements, including access levels, notification settings, and integration configurations.

Reporting of security incidents

Customer is encouraged to report suspicious activity, potential security breaches and other security-related concerns to MyDesk's Security Team as soon as possible.