\n<\/p>\n
ProPublica is a nonprofit newsroom that investigates abuses of power. Sign up to receive our biggest stories as soon as they\u2019re published.<\/p>\n
The Defense Department has tightened cybersecurity requirements for tech companies that sell cloud computing services to the Pentagon.<\/p>\n
The updates, issued this month, ban IT vendors from using China-based personnel to work on department computer systems and require companies to maintain a digital paper trail of maintenance performed by their foreign engineers.<\/p>\n
The changes follow a ProPublica investigation that exposed how Microsoft used China-based engineers to maintain government computer systems for nearly a decade \u2014 a practice that left some of the country\u2019s most sensitive data vulnerable to hacking from its leading cyber adversary.<\/p>\n
U.S.-based supervisors, known as \u201cdigital escorts,\u201d were supposed to serve as a check on these foreign employees, but we found they often lacked the expertise needed to effectively supervise engineers with far more advanced technical skills.<\/p>\n
The Defense Department now says in its \u201cSecurity Requirements Guide\u201d that only \u201cpersonnel from non-adversarial countries\u201d may work on its cloud systems and that the escorts supervising those foreign workers \u201cmust be technically qualified in the code\/system or technology they are providing access to.\u201d<\/p>\n
In addition, cloud providers must maintain detailed audit logs, a digital trail of actions in computer systems. The logs \u201cmust include identification of the escort and escorted,\u201d including country of origin, as well as details of commands executed and settings changed.<\/p>\n
Until our reporting, top Pentagon officials said they had been unaware of Microsoft\u2019s digital escort system, which the company developed as a work-around to a Defense Department requirement that people handling sensitive data be U.S. citizens or permanent residents.<\/p>\n
Cybersecurity and intelligence experts have told ProPublica that the arrangement poses major risks to national security, given that laws in China grant the country\u2019s officials broad authority to collect data. Leading members of Congress, in turn, have called on the Defense Department to strengthen its security requirements while blasting Microsoft for what some Republicans called \u201ca national betrayal.\u201d<\/p>\n
The Pentagon is now conducting an investigation into the digital escort program, with a focus on Microsoft\u2019s China-based engineers.<\/p>\n
Following ProPublica\u2019s reporting, Microsoft announced in July that it would stop using China-based engineers to service Defense Department cloud systems. In a statement for this article, a spokesperson said the company was committed to implementing the department\u2019s new requirements.<\/p>\n
\u201cOur commitment to national security is foundational, and we remain focused on providing the most secure services possible to the US government,\u201d the spokesperson said. \u201cWe recently implemented changes to our Department support model, and will continue to work with our national security partners to evaluate and adjust our security protocols in light of the new directives.\u201d<\/p>\n
\n A Little-Known Microsoft Program Could Expose the Defense Department to Chinese Hackers<\/strong>\n <\/p>\n Doris Burke contributed research.<\/p>\n","protected":false},"excerpt":{"rendered":" ProPublica is a nonprofit newsroom that investigates abuses of power. Sign up to receive our biggest stories as soon as they\u2019re published. What Happened The Defense Department has tightened cybersecurity requirements for tech companies that sell cloud computing services to the Pentagon. The updates, issued this month, ban IT vendors from using China-based personnel to<\/p>\n","protected":false},"author":1,"featured_media":22465,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[55],"tags":[493,4728,1230,13772,247,812,13349],"class_list":{"0":"post-22464","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-social-issues","8":"tag-bans","9":"tag-chinabased","10":"tag-pentagon","11":"tag-personnel","12":"tag-propublica","13":"tag-tech","14":"tag-vendors"},"_links":{"self":[{"href":"https:\/\/naijaglobalnews.org\/index.php?rest_route=\/wp\/v2\/posts\/22464","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/naijaglobalnews.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/naijaglobalnews.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/naijaglobalnews.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/naijaglobalnews.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=22464"}],"version-history":[{"count":0,"href":"https:\/\/naijaglobalnews.org\/index.php?rest_route=\/wp\/v2\/posts\/22464\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/naijaglobalnews.org\/index.php?rest_route=\/wp\/v2\/media\/22465"}],"wp:attachment":[{"href":"https:\/\/naijaglobalnews.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=22464"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/naijaglobalnews.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=22464"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/naijaglobalnews.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=22464"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}