The Friday evening blog post also seems designed to brush this under the rug. "We will act immediately to apply our current security standards to Microsoft-own

The Friday evening blog post also seems designed to brush this under the rug. "We will act immediately to apply our current security standards to Microsoft-owned legacy systems and internal business processes" In other words: Microsoft will adopt their own security standards. Curious whether their SOC reports mention these are optional?