Microsoft CEO Satya Nadella says “Security is our No. 1 priority” but will need teamwork to make the dream work

Microsoft CEO Satya Nadella says "Security is our No. 1 priority" but will need teamwork to make the dream work

What you need to know

  1. Microsoft is doubling down on its security efforts and will now require every employee to “have security as a Core Priority.”
  2. The employees’ efforts toward the cause will directly impact promotions, salary raises, and performance bonuses.
  3. Microsoft had initially rolled out a similar policy that tied a section of top executives’ compensation packages to their security deliverables.

As a seasoned researcher with years of experience observing tech giants’ strategies and their responses to security challenges, I find Microsoft’s recent move to prioritize cybersecurity across its operations not only strategic but also necessary given the current digital landscape.


During Microsoft’s FY24 Q3 earnings report, CEO Satya Nadella emphasized that security is the foundation of every tech layer we have and our topmost concern. In fact, we are significantly increasing our efforts in this critical area, prioritizing security over any other feature or investment.

By May, the company disclosed that they would be holding key Microsoft leaders responsible for cybersecurity by linking a portion of their pay to achieving specified security benchmarks. Furthermore, they pledged to swiftly address and rectify any security concerns raised, ensuring prompt action.

It appears that Microsoft is strongly emphasizing cybersecurity within its operations. According to an internal memo obtained by The Verge, Microsoft’s Chief People Officer, Kathleen Hogan, has made it clear that all staff members at Microsoft will consider security as a fundamental priority in their roles. This means that employees are expected to integrate security into their work processes and take responsibility for maintaining security standards across the company.

In line with how top executives were previously recognized, my contributions to the cause and performance at work will significantly influence promotions, salary increases, and performance incentives. To put it simply, demonstrating impact in my role within the Security Core Priority will be a crucial factor for my managers when deciding on recognition and rewards, as stated by the tech giant in an internal Microsoft FAQ about their new policy.

Although Microsoft reportedly dissolved its Diversity, Inclusion, and Equity (DEI) team as part of shifting business priorities, they have made it clear that their commitment to this cause remains unwavering. Interestingly, issues related to security and diversity are now becoming central topics in performance discussions within the company.

To align with Microsoft’s wider goals, team members should emphasize their efforts in enhancing security throughout the company’s technology infrastructure. This might involve incorporating security considerations during product development phases, resulting in products that serve as secure environments for users.

Microsoft’s priorities are in check

Microsoft CEO Satya Nadella says "Security is our No. 1 priority" but will need teamwork to make the dream work

It’s common knowledge that a major tech company has faced criticism due to numerous security lapses, one of which enabled hackers to breach the emails of high-ranking Microsoft executives. The US government is also under scrutiny for not addressing Microsoft’s cybersecurity issues publicly.

Microsoft, due to its dominant position in the industry and heavy dependence on its cloud operations, might receive leniency for its flaws, as the U.S. government tends to overlook these issues and persist in utilizing its services instead.

Microsoft is taking steps to strengthen security across its products and services following a significant outage triggered by a flawed CrowdStrike update. Approximately 8.5 million Windows devices experienced Blue Screen of Death (BSoD) errors as a result, with Delta Air Lines among the affected customers. Although the problem has been rectified and Microsoft accepted responsibility, it’s possible that impacted users might file lawsuits against both Microsoft and CrowdStrike for potential losses exceeding $500 million.

Delta’s CEO, Ed Bastian, criticized Microsoft’s systems as being quite delicate, hinting that Delta might reconsider its partnership with Microsoft and CrowdStrike. If Delta were to find better services, Microsoft could miss out on substantial earnings. However, Microsoft is taking significant steps to prevent similar incidents in the future, such as limiting security software like CrowdStrike’s Falcon from accessing Windows 11 at a fundamental level.

Read More

2024-08-06 13:09