Microsoft Shares Its Security Secrets

Microsoft has taken a beating in the press lately for some security gaps in its Internet and networking products. But what never makes the news are the more than 100,000 malicious attacks against the company that are foiled every year by its own security measures.
A new white paper from the company entitled simply: Security at Microsoft seeks to show the IT world how the developer’s corporate security division successfully fends off malicious and unauthorized hacks all the time. Microsoft hopes the document with help other firms learn from its experiences.

“Microsoft is committed to sharing its internal IT security practices in order to help its customers successfully secure their environments,” say the paper’s authors. “This asset protection takes place through a formal risk management framework, risk management processes, and clear organizational roles and responsibilities.”

According to Microsoft, enterprise technical professionals, security operations staff and infrastructure engineers will find the paper helpful. However, the authors caution readers that the document should only serve as a simple guideline to IT security, not a detailed plan.

“Each enterprise environment is composed of unique circumstances,” says Microsoft. “Therefore, each organization should adapt the approaches, designs, processes, and best practice recommendations described in this paper to meet its specific needs.”

To view the paper visit: http://www.microsoft.com/technet/treeview/default.asp?url=/technet/itsolutions/msit/
security/mssecbp.asp