3 ms·
I genuinely believe that where software has the direct ability to cause physical harm, there ought to be revocable professional accreditation for at least one p
by bencollier49 11y ago
I genuinely believe that where software has the direct ability to cause physical harm, there ought to be revocable professional accreditation for at least one programmer on the development team. Likewise for systems security on-site.
Actually, I'd be interested to know if things like ISO27001 are mandatory for these sorts of facilities. And who gets in trouble if the system fails.
- jakubp 11y agoI'm afraid ISO27001 guarantees very little. Specifically, in my (limited) experience these kinds of programs/accreditations only look at a few data points in the company where reality covers hundreds of data points, and only in a brief period. Nothing stops people inside the organization from not complying with the rules, and nobody actually verifies that the right people in the organization actually know the rules.
- wepple 11y agoI'd go higher than that. whoever defined the specifications of the project, should've included security as a key component. Of course, there also has to be budget and time allowances to actually make it happen.