3 ms·
There's a common systematic belief of that because that's the sort of thing a lot of actual compliance regulations de facto require (i.e., they demand controls
by lostcolony 7y ago
There's a common systematic belief of that because that's the sort of thing a lot of actual compliance regulations de facto require (i.e., they demand controls around software deploys, and putting enforcing that in the same hands as those wanting to deploy it, i.e., devs, will fail an audit).
Source: My employer is currently undergoing SOX compliance
- beat 7y agoAnd there's a good reason that separation of duties is in every compliance standard...
- lostcolony 7y agoNot saying whether it's a good or bad idea, just that it's a common systematic belief because it's a required thing in many organizations.