The proposed rules are a response to Salt Typhoon’s breach of at least eight U.S. telecom companies.

The reported scope of the Salt Typhoon hacks has expanded in recent days and weeks, from the incoming president to top U.S. officials.

Brad Smith defended the company at a time of growing concerns about whether the tech giant is sufficiently prioritizing security.

Some experts are doubtful the Homeland Security Committee testimony and questioning of Microsoft chief Brad Smith will lead to significant change.

The Homeland Security Committee plans a May 22 hearing.

The commitments are voluntary, but CISA officials said they are committed to measuring progress by the signatories across key commitments over the next year.

The former CISA director and current head of the NSA Cybersecurity Directorate are among four new members to the DHS board.

The company says securing its products is its top priority after a series of damaging, embarrassing breaches. 

U.S. cybersecurity officials issued an emergency directive this week to address a breach by Russian operatives of Microsoft first disclosed in January.

The Cyber Safety Review Board concluded in a report that Microsoft’s corporate culture has inappropriately deprioritized security.