Microsoft has stopped letting engineers primarily based in China present technical assist for US navy cloud techniques. The corporate made the change following issues about safety dangers tied to its work with the Division of Protection.
The shift got here simply days after ProPublica printed an in depth report describing how Microsoft relied on its workforce in China to assist with Pentagon-related cloud companies. Based on the report, the state of affairs had existed for round ten years and was seen as vital to Microsoft to safe federal cloud contracts. US employees with safety clearance supervised the abroad workforce to forestall safety breaches.
“In response to issues raised earlier this week about US-supervised international engineers, Microsoft has made adjustments to our assist for US Authorities prospects to guarantee that no China-based engineering groups are offering technical help for DoD Authorities cloud and associated companies,” mentioned Frank Shaw, Microsoft’s chief communications officer, in a publish on social media.
The replace impacts the corporate’s Azure cloud division, which now makes up greater than 1 / 4 of Microsoft’s whole income. Azure is bigger than Google’s cloud enterprise however nonetheless trails Amazon Internet Providers. Microsoft earns a sizeable portion of its income from US authorities purchasers, with greater than half of its current $70 billion quarterly earnings coming from US prospects.
In 2019, Microsoft received a $10 billion defence cloud contract, which was later cancelled in 2021 after authorized disputes. In 2022, the Pentagon cut up a brand new $9 billion cloud deal amongst Microsoft, Amazon, Google, and Oracle.
ProPublica‘s report raised questions on how Microsoft’s China-based engineers have been managed. It mentioned US-based supervisors, known as “digital escorts,” usually lacked the technical data of the abroad groups they have been overseeing. That imbalance raised fears about potential cyberattacks from potential gaps in oversight.
“The is clearly unacceptable, particularly in as we speak’s digital menace surroundings,” mentioned Protection Secretary Pete Hegseth in a video posted to social media. He known as the present setup a leftover from over a decade in the past and mentioned the Division of Protection will overview its techniques to ensure there are not any different areas the place comparable preparations stay.
Hegseth added that China would not play any half in US navy cloud techniques, with a two-week overview deliberate to verify for different potential vulnerabilities. “We’ll proceed to watch and counter all threats to our navy infrastructure and on-line networks,” he mentioned.
Microsoft had earlier advised ProPublica that its groups adopted all US authorities guidelines. Shaw added in his publish that Microsoft is working with nationwide safety officers to maintain bettering its safeguards.
(Picture by Joel Rivera-Camacho)
See additionally: Cloud’s hidden value: Information centre water consumption creates a world disaster
Wish to study extra about cybersecurity and the cloud from trade leaders? Try Cyber Security & Cloud Expo going down in Amsterdam, California, and London.
Discover different upcoming enterprise know-how occasions and webinars powered by TechForge here.
