“A lack of security focus for Microsoft employees could impact promotions, merit-based salary increases, and bonuses.”
Kathleen Hogan’s memo tells staff “security above all else” and adds a Security Core Priority to every Connect review. Employees prove it by “capturing their impact” in the form, which the memo swears is “not a check-the-box compliance exercise.” The visible product changes so far are users losing Basic Authentication and Outlook Lite. After years of security failures, the fix is a new field on the performance review.