Cyber Security | Microsoft Federal

Security that empowers your mission
Microsoft supports the DoD’s Zero Trust strategy

Read blog
Do more with less—Discover the latest Microsoft Entra innovations

Read blog
Microsoft collaborates with Yubico on new phishing-resistant solutions

Helping organizations prevent phishing attacks in Azure, Office 365, and remote desktop environments

Read now
FNN: Microsoft working with CISA on assessment tool for cloud security configurations

Listen Now
Microsoft collaborates with Tenable to support federal cybersecurity efforts

Learn more

Key cybersecurity milestones for agencies

use the arrow keys to navigate through the pivots and tab to focus on focusable content inside a pivot section

The heads of agencies update plans for federal network infrastructure (including adoption of cloud technology and implementation of Zero Trust Architecture) and report plans to OMB/NSC.

“The Cybersecurity Executive Order: What’s Next for Federal Agencies?”

The EO is an opportunity to meet one of the greatest challenges of our time. Improving our nation’s cybersecurity is achievable through close collaboration between government and industry, leveraging modern technologies and cybersecurity strategies with the agility that’s crucial to operating in today’s threat environment. With a proven roadmap in hand, Microsoft Federal is leaning into partner with federal agencies to define and drive a new era in cybersecurity.

“Mapping the Cybersecurity Executive Order Milestones”

To help agencies meet the EO and to accelerate their long-term journey towards secure cloud and Zero Trust, Microsoft has recently published our Zero Trust rapid modernization plan and Zero Trust Scenario Architectures and a number of other frameworks for agencies.

“Why agencies need private sector partners to help them navigate the cybersecurity EO”

President Joe Biden’s recent cybersecurity executive order jumpstarted agencies’ efforts to modernize the government’s IT infrastructure with a set of standards that will enable agencies to proactively address threats and harden the nation’s overall cybersecurity posture.

Cybersecurity EO

Heads of federal civilian agencies evaluate and classify agency data and provide to DHS and OMB a report of their evaluation.

Agencies comply with NIST/CISA/OMB guidance on security measures for critical software including applying practices of least privilege, network segmentation, and proper configuration.

“EO Strategies for Securing Critical Software & Classifying Agency Data”

Critical software and classifying agency data guidance are the next key focus. Here Microsoft covers the connection between the two and the ways agencies can address both head-on as part of a holistic cyber modernization strategy.

Cybersecurity EO

Agencies to establish requirements for logging, log retention, and log management which shall ensure centralized access and visibility for the highest level security operations center of each agency.

“Uncovering new unknowns: How to approach EDR & logging Cyber EO milestones”

The two most critical requirements agencies need to turn their attention to next are endpoint detection and response (EDR) and logging, log retention, and log management.

Learn why

“Microsoft launches Modern Log Management Program to help federal agencies accelerate Cyber EO compliance”

The Biden administration released guidance in August 2021 for federal agencies to move towards standardizing log event management, to improve ability to detect cyber threats. In response Microsoft is launching the Modern Log Management Program to help agencies meet these requirements.

Cybersecurity EO

Federal civilian agencies to adopt government-wide EDR approaches based on OMB requirements.

“Uncovering new unknowns: How to approach EDR & logging Cyber EO milestones”

The two most critical requirements agencies need to turn their attention to next are endpoint detection and response (EDR) and logging, log retention, and log management.

Learn why

Cybersecurity EO

Agencies comply with the guidance identifying practices that enhance the security of the software supply chain with respect to software procurement.

“Securing critical infrastructure requires collaboration between industry, agencies”

With the recent cybersecurity executive order and the critical infrastructure control systems memo, President Joe Biden’s administration is making cybersecurity a top priority.

“Continued investments in supply chain security in support of the cybersecurity Executive Order”

Here are some of our more recent learnings and practices regarding supply chain security, relevant to the cybersecurity Executive Order.

Zero Trust Memo

General: Agencies must designate and identify a zero trust strategy implementation lead for their organization. OMB will rely on these designated leads for Government-wide coordination and for engagement on planning and implementation efforts within each organization.

National Security Memo

Owners/operators of National Security Systems must update existing agency plans to prioritize resources for the adoption and use of cloud technology, including adoption of Zero Trust Architecture as practicable and develop a plan to implement Zero Trust Architecture, which shall incorporate, as appropriate.

Zero Trust Memo

General: Agencies must submit to OMB and CISA an implementation plan for FY22-FY24 for OMB concurrence, and a budget estimate for FY23-24

Applications and Workloads: Agencies must provide any non-.gov hostnames used by their internet-accessible information systems to CISA and GSA

National Security Memo

Agencies shall identify and maintain an inventory of those systems designated as National Security Systems. Agencies shall retain their own inventory subject to access by specified named individuals, or based on specific NSA cyber defense mission roles, as agreed upon between the National Manager and the head of the agency or designee.

Zero Trust Memo

Data: Agency Chief Data Officers must work with key agency stakeholders to develop a set of initial categorizations for sensitive electronic documents within their enterprise, with the goal of automatically monitoring and potentially restricting how these documents are shared.

National Security Memo

Applications and Workloads Agencies must select at least one FISMA Moderate system that requires authentication and is not currently internet-accessible, and securely allow full featured operation over the internet

Identity: Public-facing agency systems that support MFA must give users the option of using phishing-resistant authentication.

Identity: Agencies must remove password policies that require special characters and regular password rotation from all systems.

The administration’s continued focus of cybersecurity sets out to modernize the government’s IT infrastructure to enable the nation to be more proactive when dealing with cyber threats. To achieve this, the government should partner with industry in fortifying cybersecurity postures.

Learn more about our point of view

Your trusted partner helping you achieve federal cybersecurity guidelines…and your mission

Enable security modernization

Ensure security teams are empowered to combat the increase in sophisticated attacks.

Web of fiber optic strands stretching out in all directions

Increase collaboration

Enable information sharing and security practices across public and private sector organizations.

Sunrise, red response truck parked in industrial space

Deliver trusted and secure services

Build trust in government by securing information, protecting critical infrastructure and facilitating regulatory compliance.

Close up of woman’s face wearing glasses that reflect numbers and graphs

Skilling Learning Path

Microsoft works with you to develop customized skilling plans for leaders to reach their technical or executive cybersecurity goals.

Microsoft's public policy for national cybersecurity

The Cybersecurity EO accelerates IT modernization, security, and incident response. Microsoft is committed to supporting this initiative and fostering cybersecurity improvements that impact our nation.

Learn more

The Future of Cybersecurity Workforce

The recent Cybersecurity EO has accelerated the need for cybersecurity professionals. Microsoft’s Max Stier, Brad Smith, Chris DeRusha and Jennifer Ricker sat down together at the US Public Sector Summit to discuss how they are adjusting to the EO, what they are seeing others in the industry do and how they are approaching the accelerated need for cybersecurity professionals.

Cover page of the Microsoft Cybersecurity Interactive guide

Microsoft Federal’s interactive guide on the Cyber EO helps agencies better understand near- and long-term milestones; build a strategic response aligned to security modernization priorities and EO requirements; and determine how technology partners can help accelerate the journey.

Explore now

U.S. Navy migrates workforce to hybrid within weeks

Harnessing the power of hybrid work, the U.S. Navy shifts its telework policy to meet location challenges without compromising security.

Learn more

Woman drinking coffee while looking at phone

The Cybersecurity EO accelerates efforts across government to provide a secure and resilient remote federal workspace; enhance security with a unified defense of your digital government estate; and maintain vigilance with intelligent security.

Learn more

Security that empowers your mission

Microsoft supports the DoD’s Zero Trust strategy

Do more with less—Discover the latest Microsoft Entra innovations

Microsoft collaborates with Yubico on new phishing-resistant solutions

FNN: Microsoft working with CISA on assessment tool for cloud security configurations

Microsoft collaborates with Tenable to support federal cybersecurity efforts

Key cybersecurity milestones for agencies

“The Cybersecurity Executive Order: What’s Next for Federal Agencies?”

“Mapping the Cybersecurity Executive Order Milestones”

“Why agencies need private sector partners to help them navigate the cybersecurity EO”

Your trusted partner helping you achieve federal cybersecurity guidelines…and your mission

Enable security modernization

Increase collaboration

Deliver trusted and secure services

Skilling Learning Path

Microsoft's public policy for national cybersecurity

The Future of Cybersecurity Workforce

Missions enabled by modern security

U.S. Navy migrates workforce to hybrid within weeks

Resources and Articles

Cloud Adoption Framework

Zero Trust - Reference Architecture

Rapid Adoption Modernization Plan - RAMP

FNN: Microsoft working with CISA on assessment tool for cloud security configurations

Microsoft supports the DoD’s Zero Trust strategy

Authentication strength – choose the right authentication method for your scenario

Do more with less—Discover the latest Microsoft Entra innovations

New phishing-resistant solutions available now with Azure AD and YubiKeys

Assessment Tool - Zero Trust Deployment Center

Microsoft collaborates with Tenable to support federal cybersecurity efforts

The Cybersecurity Executive Order: What's Next for Federal Agencies?

Mapping the Cybersecurity Executive Order Milestones

Continued investments in supply chain security in support of the cybersecurity Executive Order

EO Strategies for Securing Critical Software & Classifying Agency Data

Uncovering new unknowns: How to approach EDR & logging Cyber EO milestones

How telemetry can guide an agency’s zero trust journey

GovExec: Answering the nation's call on cybersecurity together

FNN: Why agencies need private sector partners to help them navigate the cybersecurity EO

Axios: How public-private partnerships can strengthen U.S. cybersecurity

Microsoft expands on cybersecurity commitments for U.S. government agencies

FNN: How agencies can benefit from Microsoft’s long experience with zero trust

FNN: Securing critical infrastructure requires collaboration between industry and agency

FNN: Taking a risk-based approach can help agencies, industry respond to rise in cybercrime

FNN: Nation-state cyber attacks aren’t going away. Here’s how to defend against them

Microsoft launches Modern Log Management Program to help federal agencies accelerate Cyber EO compliance

Deliver trust at scale

Contact us