Microsoft Revamps Security Leadership, Empowering Deputy CISOs

There have been a series of major security breaches recently, and Microsoft is making changes to its security practices, organizational structure, and executive compensation to address the issue, as government leaders and big customers increasingly pressure the company to address the issue.

A portion of the company’s senior executive compensation will be tied to progress towards security goals, according to the company. Each product group will be headed by a deputy chief information security officer (CISO), and teams from the company’s major platforms and product teams will be brought together in “engineering waves” to revamp security procedures. 

A new team of deputy chief information security officers has been set up by Microsoft in response to blistering criticism from federal officials in April about the lack of security governance. They will be embedded within engineering as part of a sweeping new security governance framework that has been implemented by Microsoft. 

It has been announced that Redmond will tie “part of the compensation of its Senior Leadership Team to our progress toward meeting the security milestones and plans that we set forth for the company.” Microsoft security chief Charlie Bell announced on May 2. A spokesperson for Microsoft’s Executive Vice President of Security, Charlie Bell, has mentioned on LinkedIn that Microsoft’s Secure Future Initiative is a part of the decision to re

[…]
Content was cut in order to protect the source.Please visit the source for the rest of the article.