3 ms·
You're required by to set up systems to ensure accounting information can not be tampered with, even if people tampering with accounting information isn't consi
by ehmish 9y ago
You're required by to set up systems to ensure accounting information can not be tampered with, even if people tampering with accounting information isn't considered to be a high risk. To make it more concrete, it means you can't push to master any more in a git repository to fix some botched merge because, it happens to deal with revenue in some tiny corner of it's functionality and every change has to be approved by multiple people
- jjoonathan 9y agoIn light of git's enforced immutability constraints and the fact that multiple approval for merges is SOP at many large companies, I suspect that isn't a very good analogy.
- jogjayr 9y agoI thought they meant that literally, and not as an analogy. At my company, developers can't do production deployments for, I've been told, "SOX compliance".