3 ms·
> Part of Sarbanes-Oxley is to make sure IT systems are not manipulated. I would expect that there are limits to this. If a rogue employee engages in fraudulen
by gnode 8y ago
> Part of Sarbanes-Oxley is to make sure IT systems are not manipulated.
I would expect that there are limits to this. If a rogue employee engages in fraudulent behaviour against you, using "false usernames" to subvert your security as this employee reportedly did, then I don't see how the organisation could be considered responsible.
- londons_explore 8y agoI'm gonna guess they use github and this guy just pinged an admin to have a few new github users called things like "Legolas66" added to the organisation. Many orgs don't track github usernames to real human mappings well or at all, mostly because the single sign on version of github is 3x the price.