Microsoft is allegedly tying security efforts to the performance review of every employee.
The Verge reported that it had seen an internal memo from Microsoft's Chief People Officer, Kathleen Hogan. In it, Hogan outlined that not producing substantial work focused on security could negatively impact every worker's salary increases, promotions, and bonuses.
The Verge noted Hogan's memo said:
Everyone at Microsoft will have security as a Core Priority. When faced with a tradeoff, the answer is clear and simple: security above all else(...) Our new Security Core Priority reinforces our commitment to security and holds us accountable for building secure products and services."
The tech giant previously announced that it was linking the fulfilment of security goals with executive compensation in an expansion of its Secure Future Initiative (SFI), first announced last November. This further extension of that policy to every employee seemingly intends to underscore its commitment to “making security (its) top priority, above all else".
UC Today has reached out to Microsoft for comment.
More Info On The Security Core Priority
Security and diversity are now at the forefront of Microsoft's strategic pillars. Both are integral components of the internal performance review process known as "Connect". Connect is designed to be utilised by all staff, including execs who are also accountable for delivering on specific security objectives.
Microsoft employees will reportedly now be mandated to demonstrate their contribution to enhancing security measures. For those in technical roles, for example, this reportedly involves embedding security considerations into the early stages of product development, adhering to established security protocols, and ensuring that products are secure by default for customers.
“Delivering impact for the Security Core Priority will be a key input for managers in determining impact and recommending rewards,” an internal Microsoft FAQ on its new policy allegedly wrote. “It goes beyond compliance, as we are asking employees to prioritise security in all the work that they do and hold themselves accountable by capturing their impact for it whenever they complete a Connect."
Microsoft's Security Struggles
Microsoft has come under fire in recent years for its perceived lax security infrastructure.
