Let Microsoft own cyber security, not outsource it

TLDR:

• Microsoft faced a global outage due to an incorrectly configured update to its cybersecurity software.
• The author suggests that Microsoft should handle cybersecurity internally instead of outsourcing it to third parties.

Modern life heavily relies on cyber infrastructure, making cybersecurity a crucial aspect to be taken for granted. The recent outage in Microsoft’s services due to a faulty update in its cybersecurity software raises concerns about the security of cyber infrastructure. The author argues that Microsoft, being the best to understand its code’s vulnerabilities, should transform itself into a giant cybersecurity firm.

The incident highlights the importance of accountability in instances of cybersecurity failures. While the responsibility initially lies with CrowdStrike for the faulty software upgrade, Microsoft also has a larger economic responsibility to ensure cybersecurity for its clients. The author refers to Nobel Prize-winning insights on why firms exist and suggests that Microsoft should handle cybersecurity internally to prevent such disruptions in the future.

As Microsoft faces reputational damage due to the outage, competitors in the cloud service business may seek to capitalize on the situation. It is crucial for Microsoft to announce short-term and long-term measures to prevent such outages in the future and hold parties accountable for their roles in cybersecurity failures. Overall, the article emphasizes the need for robust cybersecurity measures in our modern interconnected lives.