The Microsoft 365 outage demonstrates that email dependencies can disrupt business processes even when other functions remain available. Infotech’s research brief, “Microsoft 365 Outage: Immediate Actions for CIOs,” covers recovery validation, potential security coverage gaps, and continuity measures for prolonged cloud outages.
Arlington, Virginia, November 13 (CNW)—In response to the Microsoft 365 outage that began on November 12, Infotech, a global research and API-driven advisory firm, recommends that CIOs verify the restoration of critical business workflows, integrations, and security controls before declaring normal operations resumed. The company’s new research brief, “Microsoft 365 Outage: Immediate Actions for CIOs,” also advises organizations to document the service disruption and retain evidence to support future service level agreement (SLA) claims.
The outage began Thursday afternoon, initially manifesting as failed access to Exchange Online mailboxes in the Americas region and impacting related functionality in Teams, SharePoint, Copilot, and Defender. Later that evening, servers that had resumed service failed again under load; Microsoft subsequently increased capacity and began rolling back a recent network change. According to an update at noon Eastern Time on November 13, service availability is improving, but intermittent issues persist, and Microsoft has not provided a restoration timeline. At that time, Microsoft stated it had found no evidence of malicious activity, and the root cause remains under investigation.
Kate Wood, Vice President of Research and Development at Infotech, said: “CIOs need clear justification to inform business units that it’s safe to resume normal operations. This means knowing which critical processes have been tested, where security coverage still needs to be verified, and which teams must continue using alternative solutions. Updates to executives should clearly highlight these outstanding issues so business teams can plan their next steps.”
The cases summarized in the Infotech report show that backup systems can continue operating as long as alternative manual pathways exist; however, when email is the only channel, business operations come to a halt. According to news reports, affected areas included delays in patient referrals and court communications, while some organizations maintained critical operations through other systems or manual processes. The core messaging and meeting functions of Teams, as well as direct file access via SharePoint, remained largely available, further underscoring the need to evaluate the specific functions and dependencies supporting each business process.
Recommended actions for Microsoft 365 response and recovery
Infotech recommends that the CIO focus on maintaining operations and documenting impacts. The IT team should continuously record unresolved issues and failed contingency measures during the recovery process to keep executives informed of operational status and create a record to guide improvements to the continuity plan.
The company's study, "Microsoft 365 Outage: Immediate Actions for CIOs," summarizes the recommendations as follows:
- Maintain critical operations. Microsoft service health notifications do not imply that all business processes have been restored. Maintain alternative communication channels and access to critical information independently of Microsoft 365, verify that key business workflows, integrations, and queued transactions have been properly restored, and document continuity gaps exposed by the outage.
- Strengthen cybersecurity practices. During previous large-scale outages, threat actors often impersonated Microsoft support personnel, promising to restore access. Employees should be reminded to remain vigilant for phishing emails, credential theft attempts, and deepfake voice or video calls during disruptions and recovery. Additionally, verify that affected security monitoring and policy enforcement functions have been restored, including service-related logs and policies, and review any potential coverage gaps that may have occurred during the outage.
- Prepare for an SLA claim. Service credits are not automatically granted; SLA claims typically require customers to provide evidence of impact to their own services, not just confirmation of a widespread outage. Organizations should retain evidence of the outage, such as service health announcements, documentation of actual disruptions, and have their vendor and legal teams review applicable agreements to determine eligibility for credits, evidence requirements, and submission deadlines.
For longer-term preparedness, Infotech emphasizes testing continuity procedures for prolonged outages affecting multiple cloud services. Organizations should identify where dependencies on a single cloud environment create common failure points and establish independent continuity options when the business impact is significant.
Additional resources include the company’s “Develop a Business Continuity Plan,” “Create a Right-Sized Disaster Recovery Plan,” and the IT Communications Research Center.
For more information, download the full guide, "Microsoft 365 Outage: Immediate Actions for CIOs." For exclusive media commentary from Infotech experts, contact [email protected].
About Infotech
Infotech (formerly Info-Tech Research Group) serves over 30,000 IT leaders worldwide through an API-driven advisory model, helping them systematically enhance organizational performance. With 30 years of trusted expertise and proven impact, Infotech provides technology leaders with industry-leading expert guidance, proven methodologies, practical tools, training, coaching, and consulting to accelerate decision-making and deliver measurable results.
For insights into Infotech’s human resources research and consulting services, visit McLean & Company; for data-driven software procurement insights and vendor evaluations, visit the company’s SoftwareReviews platform.
Media professionals can register for the company’s Media Insiders program to gain unlimited access to research in IT, HR, and software, as well as hundreds of industry analysts. For access, please contact [email protected].
For information about Infotech or to access the latest research, visit infotech.com and follow their updates on LinkedIn and X.