Commercial transition
Previous stateThe four named Security specializations did not operate under the newly announced recurring independent-audit model.
→New statePartners must fund and pass an independent audit every two years to validate delivery capability; transition protection extends the existing anniversary by six months.
Who is affected
Microsoft partners holding or pursuing Cloud Security, Data Security, Identity and Access Management or Threat Protection specializations.
Action required
Record the extended anniversary, budget for the external audit, assemble real-customer delivery evidence and monitor forthcoming detailed guidance.
Evidence boundary
The announcement establishes policy and transition mechanics, not that every partner has already entered or completed an audit. Audit-detail guidance remains forthcoming.
Timeline
- Audit-policy transition announced
Microsoft named the four affected specializations and biennial model.
- Transition scheduled to begin
The programme update placed the change at the end of July.
Official sources
- July 2026 Partner Center announcementsMicrosoft Partner Center · 2026-07-15 · Official specialization-policy announcement