Microsoft Overhauls Cybersecurity Strategy After Scathing CSRB Report
SecurityWeek
|
Summary
Following a critical US government report criticizing its cybersecurity measures, Microsoft has announced a comprehensive overhaul of its security strategies, as outlined by security chief Charlie Bell. Microsoft is now prioritizing security enhancements over all other product features by integrating Deputy CISOs into each product team, linking executive compensation to security achievements, and initiating substantial engineering efforts across services like Azure and Windows. This strategy aligns with the Secure Future Initiative that aims to enhance cloud security, manage identity signing keys more effectively, and raise the default security level for all products. The initiative also includes adopting rigorous standards for identity management and securing access to Microsoft's network environments and production systems with advanced measures such as Zero Trust policies.
