What is the FPG Security Requirements Document?
This document covers Microsoft’s internal procedures regarding the privacy and security of personal financial digital information for MSN users. This document could be given to government representatives for audits or reviews, or used as a standard for potential financial business partners. The Security Requirements document spearheaded a trend for the entire company towards the documentation of the processes and procedures regarding users’ private information.
The Financial Products Group (FPG) at Microsoft decided to initiate this project based on the Gramm-Leach Bliley Act of 1999. This act allows both the federal and state government to monitor and enforce the Financial Privacy Rule, the Safeguards Rule, and Pretexting, each of which governs private financial information. The Financial Products Group chose me to be the sole Technical Writer for this project. My duties involved meeting with multiple project managers on different teams, creating, maintaining and organizing the document based on their feedback, and incorporating input from Microsoft’s legal department.
Although I was only required to create this document in a printable form, I also created an online version (using HTML Help compiler) so that managers and developers could easily browse or search for key words.
Can I view a sample?
Since the FPG Security Requirements document contains proprietary information regarding detailed technologies and procedures, it is classified, and can only be viewed by certain Microsoft employees or by designated contractors. Unfortunately, I cannot provide you with a sample.
However, if you are a Microsoft employee, you may contact my former manager, Maris Olsen, for permission to view the document.
Maris Olsen
mariso@microsoft.com