Security and governance
Explore how we’re protecting people, data, devices, and workloads across Microsoft through security, identity, compliance, and governance practices.
-
Keeping leaders safe from cyber actors: Three lessons learned from our experience at Microsoft
Once a Marine, always a Marine. That’s certainly true for Doug Pierson, a recently retired US Marine Corps Major General who manages our Microsoft Executive…
-
How we deploy and manage enterprise devices at Microsoft Digital
In a global organization such as Microsoft—with more than 220,000 employees connecting and working together from offices and remote workspaces scattered around the world—we enable…
-
Securing AI agents in the enterprise: Learnings from our journey at Microsoft
As AI agents become more sophisticated and autonomous, large enterprises like ours face a fundamental challenge: How do you enable powerful new AI experiences among…
-
Empowering employees after the call: Enabling and securing Microsoft Teams meeting data retention at Microsoft
Microsoft Teams meetings help our globally distributed and digitally connected employees create meaningful hybrid work experiences. When those meetings are recorded and transcribed, or their…
-
Keeping the enterprise secure by default: Secure Boot certificate updates at Microsoft
At Microsoft, we manage around 500,000 Windows client devices worldwide, from employee laptops to servers to meeting room systems. In an environment that large, it’s…
-
Implementing Agent 365: How we’re governing and managing AI agents at Microsoft
Building readiness for Agent 365 at Microsoft At Microsoft, we’re on a Frontier Transformation journey to reimagine work and redefine processes through the power of…
-
Taming software licensing sprawl at Microsoft with an AI-driven solution
It’s a common challenge at any large enterprise—important, related data scattered across the organization, residing in disconnected silos. If only there was an efficient way…
-
How we approach cybersecurity risk management at Microsoft
Cybersecurity risk management at Microsoft is an enterprise-wide discipline spanning governance, engineering, operations, and organizational culture. Through our international operations and diverse portfolio of products,…
-
Microsoft CISO advice: Governing security at scale with Security Development Lifecycle
Microsoft first mandated use of Security Development Lifecycle (SDL) in 2004. Now, SDL underpins our Secure Future Initiative (SFI) and supports SFI’s goals of secure…
-
Transforming our approach to sensitivity labels at Microsoft with Microsoft Entra
Security groups serve as the backbone of our approach to access control across the Microsoft corporate tenant. These groups determine who has access to different…
-
How we’re tackling Microsoft 365 Copilot governance internally at Microsoft
Governance in the age of AI Unlocking the next generation of productivity tools Microsoft 365 Copilot combines the power of large language models (LLMs) with…
-
Powering the technical veracity of AI at Microsoft with a Center of Excellence
When we launched our AI Center of Excellence (CoE) in 2023, we had a straightforward goal: Help our organization experiment with AI, learn quickly, and…