新加坡：专家表示，周五（11月13日）发生的全球微软Outlook中断事件，凸显了当许多组织依赖同一技术供应商提供关键功能时可能产生的风险。
SINGAPORE: The global Microsoft Outlook outage on Friday (Nov 13) highlighted the risks that can arise when many organisations depend on the same technology providers for critical functions, experts said.
南洋理工大学（NTU）教授薄慧芳（Boh Wai Fong，音译）表示，公司之所以倾向于选择这些供应商，是因为其效率高、具有规模经济且便于集成。
Professor Boh Wai Fong from Nanyang Technological University (NTU) said companies have gravitated towards these vendors because of the efficiency, economies of scale and integration.
但这类决策也往往导致对单一供应商的过度依赖。一旦发生重大故障，便会在全球范围内产生连锁反应。
But such decisions also tend to result in an over-reliance on a single vendor. A major failure can then have ripple effects across the world.
薄教授将此描述为“数字化转型的悖论”，即对单个组织而言可能是最优的选择，未必对整个生态系统最有利。
Prof Boh described this as a "paradox of digital transformation", where what may be optimal for an organisation may not necessarily be best for the entire ecosystem.
日立Vantara亚太区首席技术官、前微软高管马修·哈德曼（Matthew Hardman）表示，即使底层故障不在其控制范围内，组织也必须为中断做好规划。“你无法外包风险，”他说。“风险是组织必须自行承担的。”
Mr Matthew Hardman, Asia-Pacific chief technology officer at Hitachi Vantara and a former Microsoft executive, said organisations have to plan for disruptions even when the underlying failure was outside their control. "You can't outsource risk," he said. "Risk is something you have to own as an organisation."
发生了什么周五的全球微软365中断事件持续了半天以上，扰乱了包括Outlook、Teams和Copilot在内的服务，影响数千用户，并波及亚太地区的工作时间。
WHAT HAPPENED The global Microsoft 365 outage on Friday disrupted services including Outlook, Teams and Copilot for more than half a day, affecting thousands of users and spilling into Asia-Pacific business hours.
微软最初将连接问题归因于其基础设施面临“负载升高”，但后来表示，这是由于服务器意外变得不可用，导致需求转移到仍在运行的服务器上所致。
Microsoft initially attributed the connectivity problems to an "elevated load" across its infrastructure, but later said this was caused by servers unexpectedly becoming unavailable, shifting demand onto those still operating.
该公司仍在调查服务器离线的原因，并表示目前未发现任何恶意活动导致此次中断。
The company is still investigating why the servers went offline and has said it is not aware of any malicious activity behind the disruption.
微软报告称，在调整流量协议、重新分配流量并引入针对性流量阻断措施后，部分地区实现了部分恢复，但改善情况未能持续。
Microsoft reported partial recovery in some regions after adjusting traffic protocols, redistributing traffic and introducing targeted traffic-blocking measures, although the improvements were not sustained.
在新加坡，部分政府系统和多家银行的电子邮件服务受到影响，而紧急服务和Singpass保持正常运行。
In Singapore, some government systems and the email services of several banks were affected, while emergency services and Singpass remained operational.
云端漏洞 南洋理工大学计算与数据科学学院副教授 Anupam Chattopadhyay 警告称，在没有详细的根因分析之前，现在对潜在漏洞发表评论还为时过早。
CLOUD VULNERABILITIES Associate Professor Anupam Chattopadhyay from the College of Computing and Data Science at NTU cautioned that it was still too early to comment on potential vulnerabilities without a detailed root-cause analysis.
他表示，微软的服务运行在一个复杂的生态系统中，涉及服务器、软件、数据库管理和其他工具，物理基础设施也分布在不同地点。
He said Microsoft's services operate across a complex ecosystem involving servers, software, database management and other tools, with physical infrastructure also distributed across different locations.
他补充道：“虽然这种云基础设施旨在减轻故障影响，但这种巨大的复杂性也使得快速识别和修复故障变得非常困难。”
"While such cloud infrastructure is designed to mitigate failures, this massive complexity also makes it very hard to quickly identify and repair a failure," he added.
“因此，对问题的快速修复可能会触发其他问题，从而导致这种级联故障效应。” 南洋理工大学网络安全研究中心执行主任刘杨教授表示，此次中断凸显了云基础设施更广泛的局限性。
“Hence, a quick fix to the problem may trigger other problems that have led to this cascading failure effect.”Professor Liu Yang, executive director of NTU's Cyber Security Research Centre, said the outage highlighted a broader limitation of cloud infrastructure.
他说：“冗余并不一定能保证弹性，特别是当多个服务共享底层基础设施或依赖关系时。”
"Redundancy does not necessarily guarantee resilience, particularly when multiple services share underlying infrastructure or dependencies," he said.
他补充说，需要更好的机制来实现故障隔离、自动恢复和关键业务的连续性。
He added that there was a need for better mechanisms for fault isolation, automated recovery and continuity of critical operations.
他说，虽然全部根因尚未确定，但更广泛的教训是，网络安全需要不仅涵盖防范攻击的保护，还要涵盖日益互联的数字和人工智能基础设施的弹性和可靠性。
While the full root cause has yet to be established, he said the broader lesson was that cybersecurity needed to encompass not only protection against attacks, but also the resilience and dependability of increasingly interconnected digital and AI infrastructure.
依赖单一供应商 对于企业而言，此次中断引发的一个更大问题是，其业务有多大程度依赖单一技术供应商。刘杨教授表示：“现代社会已高度依赖少数主要云和技术供应商。
DEPENDING ON ONE PROVIDER For businesses, one of the bigger questions raised by the outage is how much of their operations depend on a single technology provider. Prof Liu said: “Modern society has become highly dependent on a small number of major cloud and technology providers.
“当这些平台之一发生重大中断时，其影响可能会级联蔓延至全球的企业、政府和基本服务。” 查托帕德亚耶副教授表示，此次中断暴露出的最明显弱点是“对技术供应商的严重、单一依赖”。
“When one of these platforms experiences a major disruption, the impact can cascade across businesses, governments and essential services worldwide.”Assoc Prof Chattopadhyay said the clearest weakness exposed by the disruption was the "heavy, single-pointed reliance on technology providers".
“此次中断的表现形式正在影响每一个行业，包括关键行业，而我们没有备选方案，”他说。
“The manifestation of this outage is affecting every industry, including critical ones and we have no fallback plan,” he said.
他补充道，没有任何单一服务供应商能完全保证不间断的正常运行时间，组织需要考虑如果中断持续超过一天会发生什么。
He added that no single service provider can give complete assurance of uninterrupted uptime, and that organisations needed to consider what would happen if the disruption lasted more than a day.
网络安全公司Mimecast亚太区副总裁兼总经理朱尼基（Nicky Choo，音译）表示，其影响远不止员工无法发送电子邮件或参加在线会议。
Mr Nicky Choo, vice-president and general manager for Asia-Pacific at cybersecurity firm Mimecast, said the implications go beyond employees being unable to send emails or join online meetings.
他说，技术支撑着许多日常业务流程，包括同事间的协作和与客户的沟通。
Technology underpins many day-to-day business processes, including collaboration between colleagues and communication with customers, he said.
“如果你以某种方式无法访问数字服务……将会产生巨大且深远的业务影响，”他说。
"If you're unable to access digital services in one way or another … there is a huge and tremendous business impact," he said.
博教授（Prof Boh，音译）表示，企业应识别其关键依赖项，并确保必须在中断期间保持运行的职能具备冗余备份。
Prof Boh said businesses should instead identify their critical dependencies and make sure there are redundancies for functions that have to keep operating during an outage.
她还警告称，随着人工智能承担更多业务流程，此类依赖可能变得更加重要。
She also warned that such dependencies could become more significant as artificial intelligence takes on more business processes.
她说，如今，技术中断可能会阻止员工访问信息或通过电子邮件沟通。随着智能体AI越来越多地实现工作流自动化，类似的中断最终可能导致整个流程停摆。
Today, a technology outage may stop employees from accessing information or communicating by email, she said. As agentic AI increasingly automates workflows, similar disruptions could eventually halt entire processes.
她补充道，如果员工未受过在中断期间接管此类工作流的培训，组织可能面临更大的冲击，特别是当工人面临失去在技术失效时挺身而出所需的技能和组织知识的风险时。
She added that if employees were not trained to take over such workflows during disruptions, organisations could face greater impact, particularly as workers risk losing the skills and organisational knowledge needed to step in when technology fails.
2026年11月12日，美国伊利诺伊州芝加哥，展示着一个Microsoft Outlook应用程序页面。
A Microsoft Outlook app page is shown on Nov 12, 2026, in Chicago, Illinois.
专家表示，组织应首先确定哪些系统对维持运营至关重要，以及哪些服务可以暂时停用。
WHAT NEEDS TO BE DONE Experts said organisations should first identify which systems are essential to keeping their operations running and which services they could temporarily do without.
哈德曼先生将此描述为确定“最小可行业务”，并决定哪些系统属于“任务关键型”。
Mr Hardman described this as identifying a "minimal viable business" and deciding which systems are “mission critical”.
他还表示，企业应定期测试不同的中断情景，而不应将韧性规划视为一次性工作。
Businesses should also test different disruption scenarios regularly rather than treating resilience planning as a one-off, he said.
“如果我们的电子邮件通信协议瘫痪会怎样？我们如何在现有计划中构建韧性？”他说，并描述了组织应测试的情景类型。
"What does happen if our communication protocols go down for email? How do we build resilience into our existing plan?" he said, describing the kinds of scenarios organisations should test for.
查托帕德亚副教授表示，企业在停机期间应考虑两个领域：数据和通信。
Assoc Prof Chattopadhyay said businesses should think about two areas during an outage: data and communication.
他说，过去的电子邮件和附件应予以备份且可恢复，而组织应在常用渠道失效时拥有备用的内部沟通渠道。他补充说，组织应考虑将风险分散到不同的服务提供商。
Past emails and attachments should be backed up and recoverable, while organisations should have an alternative internal communication channel if their usual one fails, he said. He added that organisations should consider distributing risks across service providers.
云服务提供商也应改进压力测试，并从长远来看，允许客户在多个供应商之间顺畅运行业务，而不将其锁定在单一供应商。博教授表示，业务连续性规划也应延伸至技术恢复之后。她说：“即使技术恢复了，组织仍需处理积压工作和延迟决策。”
Cloud providers should also improve stress-testing and, over the longer term, allowing customers to run operations smoothly across multiple vendors, without locking them in. Prof Boh said business continuity planning should also extend beyond the point when technology is restored. "Even with the tech restored, organisations will still need to deal with backlogs and delayed decisions," she said.
因此，组织需要制定并测试此类业务连续性计划，以便明确在停机期间以及停机后需要采取哪些行动。
Organisations therefore need to establish and test such business continuity plans, so that they are clear on what actions need to be taken in such outages as well as after the outage.