4 ms·
I think both view points are true. - In orgs that don't trust dev typically have significantly less understanding of dev, and in my experience have really poor
by ownagefool 7y ago
I think both view points are true.
- In orgs that don't trust dev typically have significantly less understanding of dev, and in my experience have really poor security postures. Everything is a slow manual process decided by people who don't understand apps or automation.
- In orgs that trust dev too much, you usually get a federated architecture that doesn't make any sense from a strategy point of you. Some teams are great; others don't have basic controls. You typically have a bunch of different consultancies playing land and expand and selling expensive solutions that don't actually work.
As usual, the sweet spot is probably somewhere in the middle.
- grosswait 7y agoRegarding your first point about security, I see the opposite on a weekly basis. Devs, especially in startups, make secure technology decisions, but in a very narrow and entirely technical scope that essentially encompasses "their world". Once induced to see the larger picture either due to a compromised system, or table top exercises that include the rest of the business, they and leadership start to realize they've had a false sense of security.
- ownagefool 7y agoYeah, it's a problem on both sides of the fence. Finding the balance is key.