Microsoft security chief Fathi is moved out

By Robert McMillan, IDG News Service |  Security Add a new comment

Just seven months after being named as Microsoft Corp.'s security czar Ben Fathi has set his sights on a new job.

Starting in the next few weeks, Fathi will head up development of the core components of the Windows operating system, and the Security Technology Unit that he runs will be absorbed into the company's Trustworthy Computing team, led by Scott Charney.

The changes are part of a reorganization of Microsoft's core operating system development efforts, announced Thursday. Microsoft has changed the top-level organization of its Microsoft's Core Operating Systems Division team, and created new groups within this division, each focused on a different aspect of the Windows platform.

The plain-speaking Fathi had replaced Mike Nash, who had been the public face of Microsoft's efforts to lock down its operating system from attack for several years before him.

Microsoft has improved its reputation for security of late, but over the last few months there has been a spike in the number of reported vulnerabilities in its software and the total number of patches issued by the company. On Tuesday, the company issued patches for 26 bugs in its software, the largest single-day patch release in recent memory.

By merging the Security Technology and Trustworthy Computing units, Microsoft brings together two groups with very similar purposes.

Fathi's unit had been chartered with leading "Microsoft's efforts to provide customers with a more secure platform," according to Microsoft's Web site. The Trustworthy Computing team, on the other hand, was created to "promote a safe, private and reliable computing experience for everyone."

The new Trustworthy Computing team will be one of five units within the reorganized Core Operating Systems Division, which is headed up by Jon DeVaan, senior vice president, engineering strategy. DeVaan reports to Kevin Johnson, who along with Jim Allchin is co-president with the platform and services division.

The Core Operating Systems Division was formed in December of 2003 to improve the technical quality of Windows. In a statement, Microsoft called these recent changes "an extension of [the division's] original mission," and said they are "designed to provide more clarity and focus" to the group.

The new groups within the division include a Windows Engineering System and Services team, a Windows Core System team, and a PC Hardware team.

The changes will take effect when Microsoft finally releases Vista to hardware manufacturers. This is expected to happen fairly soon, as the company has said it plans to have Vista in the hands of business users by year's end.

    Add a comment

    Post a comment using one of these accounts
    Or join now
    At least 6 characters

    Note: Comment will appear soon after you have activated your account.
    Obscene/spam comments will be removed and accounts suspended.
    The information you submit is subject to our Privacy Policy and Terms of Service.

    ITworld LIVE

    SecurityWhite Papers & Webcasts

    White Paper

    Overcome Top 7 Admin Challenges of Active Directory

    As Active Directory's role in the enterprise has drastically increased, so has the need to secure the data. Gain insight on creating repeatable, enforceable processes that reduces administrative overhead and enables robust, customizable reporting and auditing capabilities. Brought to you by NetIQ.

    White Paper

    Insiders Can Ruin Your Company. Take Action.

    Did you know that 80 percent of threats to an organization come from the inside? The threat from insiders is often overlooked in organizations worldwide. This white paper from NetIQ, discusses key technology solutions that help to prevent and detect insider threats.

    White Paper

    Top Solutions and Tools to Prevent Devastating Malware

    Custom malware frequently goes undetected. According to Forrester Research, the best way to reduce risk of breach is to deploy file integrity monitoring (FIM) tools that provide immediate alerts. This white paper has been brought to you by NetIQ, the leader in solving complex IT challenges.

    White Paper

    Streamline Compliance and Increase ROI

    Streamline, simplify, and automate compliance related activities; especially those that impact multiple business units. This white paper from NetIQ, outlines solutions that will help your business gain the maximum return on investment possible while aligning your compliance programs.

    White Paper

    X-Ray of the PCI Process-4 Proactive Steps

    This white paper from Forrester Research Inc., helps break PCI into understandable components. Security and risk professionals will gain knowledge and insight into creating a compliant and secure IT environment. Follow these four proactive steps now before your next audit. Brought to you by NetIQ.

    See more White Papers | Webcasts

    Ask a question

    Ask a Question