3 ms·
AFAIK security people usually is consulting on security issues and rarely dictates implementation details. This IIRC is not the OP referring to.
by justicezyx 7y ago
AFAIK security people usually is consulting on security issues and rarely dictates implementation details.
This IIRC is not the OP referring to.
- posixplz 7y agoThat’s definitely the case when thinking about security in a strictly limited scope. In contrast, my team is holistic — any issue that could affect ICA (integrity, confidentiality, availability) is in our purview. My team engages in the earliest phases of design. Holistic security is our priority, but not a limiter for our engagements.
- adrianN 7y agoIMHO it is often the case that security can only be achieved if the design is sound. Overly complex designs are very hard to make secure.
- justicezyx 7y agoSure, but still they do not dictates implementation details. And that's different than what OP saying.