3 ms·
If you work for a company that must follow regulations, then you should be aware of your impact. You will learn this as you advance further in your career.. ho
by o-__-o 7y ago
If you work for a company that must follow regulations, then you should be aware of your impact. You will learn this as you advance further in your career.. however this post was written as though the regulations are there to cause you grief, but that can't be further from the truth. Think of it like this, the Boeing team is finding out the hard way what happens when you skirt steps in a highly regulated field.
SOX is the standard for change management for financial companies to prevent shadow changes that could enable another Enron, Worldcom, or Adelphia style cooking-of-books financial scandal. The idea is that all changes should be fully analyzed for their impact. If a change is found to have been made without going through the controls process then a review and an emergency after-the-fact change record must be created. This leads me to believe you did not just login to a server, unless you weren't supposed to have access in the first place (separation of duties requirement), but actually made a modification to that server without an approved change.
All this means that the system is very resilient and will not suffer random outages but most importantly, in the SOX world, there is no avenue for malicious changes to be introduced to critical financial systems and their data.
- closeparen 7y agoIf you’ve never encountered a brain-dead compliance process, you’ve had an extraordinarily lucky career. Even good and thoughtful regulations get interpreted into nonsensical bureaucratic nightmares by some companies’ compliance departments. The implementations that add disproportionate friction usually don’t achieve the intended benefit either. It’s not people choosing a convenience vs. safety tradeoff. It’s just people who don’t understand the subject matter at all.
- Reelin 7y agoHaving worked in a lab environment heavily subject to OSHA regulation, I think you are both correct. I've been personally subjected to brain-dead interpretations on multiple occasions, but I'm also absolutely certain that in the absence of any regulation the environment would have been absurdly dangerous. On the balance, I'll favor the regulation.