Paweł Olszewski, Secretary of State at the Ministry of Digital Affairs, and Mike Yeh, Microsoft Vice President, have signed an agreement on cooperation to strengthen Poland’s cyber defence. It is meant to increase the resilience of public administration, critical infrastructure and essential services to cyber and hybrid attacks.
What has been agreed
The agreement was signed on behalf of the Polish government by Paweł Olszewski, and on behalf of the company by Mike Yeh, Microsoft Vice President for Customer Security & Trust. According to Microsoft’s statement, the parties agreed that cooperation will focus on risks related to outdated and vulnerable systems and on critical dependencies. It will also cover strengthening cyber defence and preparing to maintain the state’s key functions and quickly restore them after disruptions.
The foundation is to be joint setting of priorities, action planning and the exchange of threat information. Microsoft also highlights the role of artificial intelligence, which is to help cyber defence teams respond to threat data faster.
The agreement is meant to complement existing forms of cooperation: the partnership within the Cybersecurity Cooperation Programme (PWCyber), Microsoft’s global Microsoft Government Security Program, and the company’s agreement with the Ministry of National Defence from February 2025.
Olszewski’s remarks
Olszewski said the cooperation would allow “more effective identification of risks, faster response to incidents and better preparation of the state to maintain continuity of operations”. He added that, at a time when Poland is one of the most frequently attacked countries in Europe, public-private partnership is an essential element of resilience.
Mike Yeh noted that administration, critical infrastructure and technology providers form a connected ecosystem. In his view, the agreement gives Microsoft and the Polish government another opportunity to work together to protect essential services.
Poland in Microsoft’s report
Microsoft refers to its Digital Defense Report 2026, covering the period from 1 July 2025 to 30 June 2026. According to it, Poland ranks 10th in Europe and 33rd globally among countries where users were most often attacked. The country was also among the ten states most frequently targeted by Russian groups acting on behalf of the state.
Globally, public administration and government services were the sector most affected by observed cyber activity – 27% of cases, ahead of the IT sector (17%) and science and higher education (14%).
The company also recalled that in December 2025 it recorded a coordinated, destructive attack by a Russian actor on Poland’s energy sector. The report’s authors considered it a significant escalation and evidence of greater readiness for destructive operations against critical infrastructure beyond Ukraine.
The statement did not disclose the value of the agreement or a detailed timetable of actions. A description of the PWCyber programme, under which Microsoft already cooperates with the ministry, is available on the Ministry of Digital Affairs website.
