The user is the most critical piece of security

In a country like India, still very vulnerable to security threats, what
is Microsofts policy on security?

Microsoft is pursuing a multi-pronged, defense in-depth strategy that: 1)
builds security into our software from the beginning; 2) empowers Internet
users, and 3) creates a culture of safety in collaboration with other companies
in the industry, businesses, law enforcement, and government.

Are the security standards practiced by Microsoft in India same as other
nations or do specific need-based India-specific policies exist?

The security standards are the same across the globe but there are some
local variations based on the local laws and regulations which we respect as
part of doing our business ethically, globally.

What can be done to ensure user safety?

The user is the most critical piece of security even in a company. We need
to ensure that the user is not overburdened with technicalities and continues to
enjoy a great on-line experience. For users, we have a simple three-pronged
messageprotect your PC; protect your information; and protect your family.

In the age of social networking, identity threats are becoming
increasingly common. What is the solution to such problems?

We believe that this issue requires a more comprehensive approach to
protecting personal information, including consumer education, new technology
tools, responsible business practices, strong legislative framework, law
enforcement engagement and expanded victim assistance. A new approach to
securely managing online identity is essential. One key component of this system
is a new technology called an Information Card, which enables the creation of
very secure digital entities. Equally important is our ability to lessen or
preferably eliminate the value of personal information, thereby drastically
reducing the incentives to commit identity theft.

Do you have any partnerships to enhance security standards?

Microsoft is taking action today to offer better security choicesboth
through improving its own software and working with government, industry and
customers to ensure security throughout the entire technology ecosystem. In
India we have an agreement with the Computer Emergency Response Team-India
(CERT-In) and CDAC.

Mehak Chawla

mehakc@cybermedia.co.in