Microsoft is tying executive pay to security performance — so if it gets hacked, no bonuses for anyone
Microsoft is getting super serious about security
In a bold move addressing some major cybersecurity concerns that have plagued the company in recent months, Microsoft has linked executive compensation to the company’s security performance.
The strategic manoeuvre comes after a series of high-profile attacks affecting the company, such as those by China’s Storm-0558 and Russia’s Midnight Blizzard.
The revelation arrives days after Microsoft CEO Satya Nadella confirmed that the company’s renewed commitment would see it “putting security above all else.”
Security boosts
The initiative, which has been called the Secure Future Initiative (SFI), launched last November, and has now been expanded to affect executives’ pay.
Charlie Bell, Executive Vice President of Microsoft Security, shared in a blog post: “We will instill accountability by basing part of the compensation of the company’s Senior Leadership Team on our progress in meeting our security plans and milestones.”
The expansion of Microsoft’s SFI takes into consideration recommendations provided by the Department of Homeland Security’s Cyber Safety Review Board (CSRB). The March report slated Microsoft for making a series of “avoidable errors.”
Specific details surrounding Microsoft’s decision to directly link at least part of its executives’ pay to cybersecurity performance are unconfirmed, but it certainly reflects the company’s goal of instilling a more proactive and engaged response to cybersecurity among workers.
Are you a pro? Subscribe to our newsletter
Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!
Bell added: “Our company culture is based on a growth mindset that fosters an ethos of continuous improvement.”
Redmond’s Chief Information Security Officer, newly appointed Igor Tsyganskiy, has also pushed a new new security governance framework, which Microsoft says “introduces a partnership between engineering teams and newly formed Deputy CISOs, collectively responsible for overseeing SFI, managing risks, and reporting progress directly to the Senior Leadership Team.”
More from TechRadar Pro
- Protect your machine with the best endpoint protection software
- Microsoft adds more security chiefs following recent cyberattacks
- Downloaded something dodgy? It’s time to compare the best malware removal
With several years’ experience freelancing in tech and automotive circles, Craig’s specific interests lie in technology that is designed to better our lives, including AI and ML, productivity aids, and smart fitness. He is also passionate about cars and the decarbonisation of personal transportation. As an avid bargain-hunter, you can be sure that any deal Craig finds is top value!