A year ago, Microsoft launched the Secure Future Initiative (SFI) to prepare for the increasing scale and high stakes of cyberattacks. SFI brings together every part of Microsoft to advance cybersecurity protection across our company and products. This initiative represents a significant step forward in safeguarding your digital assets and ensuring a secure future for all.

What is the Secure Future Initiative?

The SFI is a comprehensive cybersecurity program that brings together every facet of Microsoft’s expertise to address the evolving threat landscape. It consists of three key pillars:

1. AI-Based Cyber Defenses: Leveraging artificial intelligence (AI), we are enhancing our ability to detect and prevent cyberattacks. By automating threat detection and response, we aim to stay ahead of even the most sophisticated adversaries.
2. Advances in Fundamental Software Engineering: We are transforming our software development practices. Through automation and AI, we will design, build, test, and operate our technology with security at the forefront. This proactive approach ensures that vulnerabilities are minimized from the outset.
3. Advocacy for Stronger Application of International Norms: Microsoft is committed to advocating for global cybersecurity norms that protect civilians from cyber threats. By collaborating with international partners, we seek to create a safer digital environment for everyone.

Why the SFI Matters

Recent incidents have underscored the urgency of our response. Nation-state attackers, cybercriminals, and sophisticated techniques threaten the integrity of computer networks worldwide. The SFI is our proactive solution to bridge the remaining cybersecurity gap and protect our clients effectively.

How You Benefit

As a Microsoft client, you can expect the following benefits from the SFI:

• Enhanced Security: Our AI-driven defenses will provide real-time threat intelligence, minimizing risks to your organization.
• Reliable Software: Our commitment to fundamental software engineering practices ensures that our products are secure by design.
• Global Advocacy: We will actively engage with international bodies to promote norms that safeguard civilians in cyberspace.

Expanding the Secure Future Initiative (May 2024)

Since then, the threat landscape has continued to rapidly evolve, and we have learned a lot. The recent findings by the Department of Homeland Security’s Cyber Safety Review Board (CSRB) regarding the Storm-0558 cyberattack from last July, and the Midnight Blizzard attack we reported in January, underscore the severity of the threats facing our company and our customers.

Microsoft is  making security our top priority at Microsoft, above all else—over all other features. We’re expanding the scope of SFI, integrating the recent recommendations from the CSRB as well as our learnings from Midnight Blizzard to ensure that our cybersecurity approach remains robust and adaptive to the evolving threat landscape.

Expansion of SFI approach and scope

We have evolved our security approach, and going forward our work will be guided by the following three security principles:

1. Secure by design: Security comes first when designing any product or service.
2. Secure by default: Security protections are enabled and enforced by default, require no extra effort, and are not optional.
3. Secure operations: Security controls and monitoring will continuously be improved to meet current and future threats.

Security has always been a top priority for Microsoft, but now it’s THE top priority. The launch and expansion of the Secure Future Initiative (SFI) is a major step towards preparing for the increasing scale and high stakes of cyberattacks. SFI brings together every part of Microsoft to advance cybersecurity protection across their company and products.

Further Reading:

• A new world of security: Microsoft’s Secure Future Initiative – Microsoft On the Issues
• Expanding Microsoft’s Secure Future Initiative (SFI) | Microsoft Security Blog
• Secure Future Initiative | Microsoft