The Return to In-Person Meetings
Microsoft’s Joy Chik, who presides over identity and network access, is once again traveling for work after a long period of virtual customer engagements due to Covid. Upon arriving in the UK a few days before our interview in London, she has maximized her schedule with customer meetings, despite the severe jetlag from the SeaTac to Heathrow overnight flight.
The Journey Through Microsoft’s Ranks
Chik began her career at Microsoft 25 years ago as a software engineer, working on early versions of the company’s remote desktop products. Seven years ago, she was handpicked by CEO Satya Nadella to contribute to Microsoft’s Intune platform, a turning point that marked the start of Microsoft’s foray into security. “I started transitioning that product from a traditional software base to the cloud, covering multiple platforms,” she recalls. This experience eventually led to her current leadership role within the Microsoft identity team.
The Significance of Identity in Microsoft’s Ecosystem
Since June this year, Microsoft’s identity platform, formerly known as Azure Active Directory (AD), is now referred to as Entra ID. Chik highlights the platform’s critical role within Microsoft, given it encapsulates the enterprise and consumer sectors.
Identity as the Security Front Door
“Identity is essentially the front door to security frameworks,” Chik emphasizes. The vastness of Microsoft’s global base provides her the scope to make a significant impact on identity matters, with most enterprise users engaging with her team’s work daily. Acknowledging the weight of her responsibility, Chik finds it both a humbling challenge and fulfilling endeavor to keep advancing security measures in an ongoing race against increasingly sophisticated cyber attackers.
The Escalation of Password Attacks
Password attacks are a prevalent issue. Microsoft’s data reveals a steep rise, from about 1,000 password attacks per second a year ago to four times that figure today. Despite advancements in security, the reliance on passwords, a commonly known vulnerability, still exists—a challenge Chik and her team continue to tackle.
AI’s Dual Role in Security
Artificial Intelligence (AI) presents a dual-edged sword in cybersecurity—the same technology that fortifies defenders can also aid attackers. Microsoft isn’t new to leveraging AI for security; it employs AI to identify unusual activity and provide real-time risk assessments, making AI an integral tool in addressing the complexities of identity management. As part of their Security Copilot service, Microsoft showcases the power of Generative AI in enhancing security protocols.
Transition to Passwordless Authentication
Despite predictions of its demise by figures like Bill Gates back in 2004, the traditional password stubbornly endures. However, with tech giants like Google, Apple, and Microsoft advocating for passkeys—more secure biometric or passcode-based alternatives—the landscape is shifting. Chik is an ardent supporter of this movement, aiming to streamline user experience while bolstering security. Microsoft’s significant consumer adoption of passwordless solutions via their Authenticator app also demonstrates this trend’s momentum.
Advancing Proactive Security Measures
Looking ahead, Chik envisions identity remaining at the forefront of cybersecurity battles. Microsoft aims to proactively secure its users rather than responding to incidents, with AI investments and minimizing reliance on traditional passwords. Such strategic efforts contribute to Microsoft’s goal of enabling users to prevent breaches before they occur.