Windows 8.1 includes numerous features that are used to store and synchronise data in the cloud services of Microsoft. Here, there is the risk that this will result in the unwitting (or at least careless) use of cloud services in connection with data that is personal or critical for a given organisation. Users who store data with third parties (especially those located abroad) may also find themselves in violation of data protection laws. If a user logs into a new device using an already activated Microsoft account, the Microsoft cloud services utilised by the user will be set up automatically on the device. An organisation's data may thus be synchronised accidentally to the private devices of employees. As another example, Windows 8.1 offers the default option to back up BitLocker recovery keys directly to the cloud via one's Microsoft account. This puts sensitive encrypted information into the hands of third parties.
- BSI -
Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)