Microsoft ties executive pay to security following multiple failures and breaches
Ars Technica
|
Contributed by: Drex DeFord
Summary
In recent years, Microsoft has faced significant criticism for security and privacy lapses, highlighted by breaches from China-based Storm-0558 and Russian state-sponsored group Midnight Blizzard, which exploited Microsoft's Azure service and other systems. These incidents, along with others, triggered scrutiny from security researchers, U.S. lawmakers, and regulatory agencies, culminating in a damning report by the US Cyber Safety Review Board which criticized Microsoft's security culture and responses to breaches. In response, Microsoft announced the "Secure Future Initiative," aiming to prioritize security by introducing changes to its security practices, making leadership pay contingent on meeting security goals, and implementing a series of measures designed to enhance security across all user accounts and improve monitoring and reporting within the company. These efforts are part of a broader company-wide commitment, as reiterated in an internal memo by CEO Satya Nadella, to prioritize security enhancements over new features in response to the escalating cyber threat landscape.
