Microsoft’s security culture reboot includes cyber governance council, all-staff trainings

Microsoft published a progress report on its "Secure Future Initiative," detailing governance and operational changes after criticism and a Cyber Safety Review Board finding that Chinese-linked hackers had spied on senior U.S. officials' emails. The company announced a new Cybersecurity Governance Council, appointed deputy CISOs, tied security to performance reviews and compensation, expanded security training, improved token key management and logging, and established a Customer Security Management Office to improve incident response and customer communication.