Professional Documents
Culture Documents
Management Information System Project: Microsoft
Management Information System Project: Microsoft
Microsoft
Submitted by – Group 06
Himanshu Goyal PGP12247
Nivetha PGP12227
Formed by Harvard College dropout, Bill Gates and his childhood friend Paul Allen,
Microsoft ranked No. 21 in the 2020 fortune 500rankings of the largest United States corporations by
total revenue
Internal Factors - SWOT
Analysis
• In the wake of the global pandemic, organizations face a variety of challenges ranging from employee placement to supply
chain management, and from continued business operations to digital transformation.
Following are a few factors that spurred Business Process improvement at Microsoft:
Microsoft finds itself in a position unlike any other since the industrial revolution. The old IT model hinders companies'
ability to remain relevant in an ever-changing marketplace, and companies must upgrade to remain competitive. At
Microsoft, the management has rallied around transformation and are well underway. The company has set ambitious
goals, and are reshaping what they value and how they work. They are vision-driven and expect world-class execution at
their core.
Time
Quality
The Devil’s Quadrangle shows process performance based on four dimensions: time, cost, quality and flexibility.
1. Time (-): The change that Microsoft has implemented has helped them to significantly reduce the time required
to tend to customers queries and expectations.
2. Flexibility (+): The change allows them to be flexible and adapt to any given situation.
3. Quality (+): The internal changes has helped Microsoft to improve their quality of service.
4. Cost (Neutral): There is not much additional cost involved
Session 4
• A blockchain is a shared ledger that can store the complete transaction history of not just
cryptocurrency but other kinds of records.
• As such, it attracted initial interest among some enterprises, especially those in banking and finance.
• Microsoft ended up fielding a preview of Azure BaaS, but lately had not done much to update the
service.
• However, Microsoft's product page for Azure BaaS lists GE, J.P. Morgan, Singapore Airlines,
Starbucks and Xbox as customers.
• “The next big threat” is how Microsoft’s latest annual security report characterizes
domain names written into a distributed ledger maintained across a constellation of
computers instead of stored in a traditional, centralized registry.
• Storing domain names on a blockchain can make them difficult to shut down or even
trace to their owners.
• “In recent years, we have observed blockchain domains integrated into cybercriminal
infrastructure and operations,” the report says, nodding to Microsoft’s experience last
spring disrupting a botnet called Necurs.
Data Analytics technique used by Microsoft
We use SQL Server Analysis We use Azure Data Lake to store the
Services to create data. Data Lake makes it easy for
multidimensional cubes, so that developers, data scientists, and
business users who create their analysts to store data and to process
own reports can slice and dice and analyze it across platforms and
data in various ways. languages
Does Microsoft need digital marketing?
It advertises on internet to enhance Microsoft 365 has its own affiliate
company’s reputation marketing program
App Developers
Proprietary Software
Direct-Sales and Resellers
OEMs
https://www.microsoft.
com/en-in/
is the companies
website link and “https”
shows that it is a secure
one.
Data Breach
● A global wave of cyberattacks and data breaches in January 2021
● after four zero-day exploits were discovered
● giving attackers full access to user emails and passwords on affected servers,
administrator privileges on the server, and access to connected devices on the same network.
● Attackers typically install a backdoor that allows the attacker full access to impacted servers even if
the server is later updated to no longer be vulnerable to the original exploits.
● As of 9 March 2021, it was estimated that 250,000 servers fell victim to the attacks, including
servers belonging to around 30,000 organizations in the United States, 7,000 servers in the United
Kingdom, as well as the European Banking Authority, the Norwegian Parliament, and Chile's
Commission for the Financial Market (CMF).
Data Breach
● On 12 March 2021, Microsoft announced the discovery of "a new family of
ransomware" being deployed to servers initially infected, encrypting all
files, making the server inoperable and demanding payment to reverse the
damage.
● On 22 March 2021, Microsoft announced that in 92% of Exchange servers
the exploit has been either patched or mitigated.
Microsoft recommends…
● Apply a “hot patch” to security devices to automatically block exploitation attempts using
signatures from the threat actor’s exploit while you work to upgrade and patch devices.
However, if the attackers apply a zero-day approach – there are no such signatures, so this will
do nothing.
● Conduct an asset inventory to identify all affected Microsoft Exchange servers deployed in your
organization.
● Run version checks to see if they have been patched.
● Apply appropriate patches where possible. Devices that cannot be patched should be secured
behind a security device to detect and prevent such an exploit.
● Apply advanced scanning leveraging known Indicators of Compromise to detect leave-behinds
and anomalous behaviors resulting from a successful breach, such as using an unauthorized
back door.