Microsoft Tightening Security for Partner Companies That Handle Your Data

Microsoft announced it's strengthening security requirements for partner companies in its ecosystem. These partner companies help set up and manage Microsoft services for businesses and schools. The new rules include better vetting of partners, limited access privileges, improved monitoring, and stronger risk management. Partners will only get access to the specific data they need, not everything. This affects many families indirectly. If your workplace uses Microsoft 365, or if your children's school uses Microsoft Teams or other Microsoft products, partner companies may help manage those systems. These partners sometimes have access to accounts and data.

When a partner company has weak security, hackers can break into their systems and then access customer data. Tighter rules for partners mean better protection for your work email, documents, and school information. There are steps you can take to protect yourself when third parties access your accounts.

1. At work, enable multi-factor authentication (MFA) on your Microsoft account if it's offered. This requires a code from your phone in addition to your password.
2. Regularly review which apps and services have permission to access your Microsoft account by checking your account security settings.
3. Remove access for any apps or services you no longer use.
4. If your child's school uses Microsoft products, ask the school about their security practices and whether they use third-party partners to manage accounts. Understand that many online services you use rely on partner companies behind the scenes. When a major company like Microsoft raises security standards for partners, it benefits everyone who uses their services. You can't control what partners do, but you can control your own security practices. Strong passwords, multi-factor authentication, and regular security checkups on your accounts give you protection even if a partner company has problems.