Microsoft revamps cybersecurity approach post critical CSRB assessment

TLDR:

• Microsoft security chief pledges significant reforms to prioritize security
• New strategy includes adding Deputy CISOs to product teams, linking pay to security goals

After a scathing report from the Cyber Safety Review Board (CSRB), Microsoft’s security chief, Charlie Bell, announced plans to overhaul the company’s cybersecurity strategy. This shift will focus on prioritizing security above all other product features. The new strategy includes adding Deputy CISOs to each product team, linking a portion of senior leaders’ pay to security milestones and goals, and implementing state-of-the-art standards for identity and secrets management. Microsoft will also prioritize protecting its networks and systems, improving isolation, monitoring, inventory, and secure operations.