3 ms·

There will usually be a one-way file copy service (with AV scanner) that you can use to transfer files to the secure network. No access to cloud services is ver

• geofft 10y ago
  The purpose of security is to help the business get its job done without disruption. If security were a goal in itself, you could just shut all the servers down and go home. If a "security" measure is causing disruption to the business, it's not doing its job.
  • unethical_ban 10y ago
    It's a spectrum. Business would be a lot easier for DBAs if there were no firewalls between PCI (credit card) data and their applications, but we do it because it mitigates risk.
    • geofft 10y ago
      DBAs as in database admins? I'm talking about the business goals of the company as a whole, not for individual employees / departments. The reason you want to mitigate risk is because you want the company to get its business done (i.e., you want customers to be willing to give you money). I don't think there's any spectrum here. Good security is what helps the company's business goals. Bad security (which isn't really security) hurts it. Sometimes there are legitimate questions about whether to optimize for short-term or long-term goals, but that's no different for every other business decision a company makes.
• marcosdumay 10y ago
  This is only usable on tasks that do not require you to publish the result of the work. That normally covers all high security work, but 99% of the work of a government is communicating with the public, on both directions.