3 ms·
These are pretty good, but one problem for 'general' adoption of something like this: Most customer orgs aren't qualified to judge the vendors answers because
by count 6y ago
These are pretty good, but one problem for 'general' adoption of something like this:
Most customer orgs aren't qualified to judge the vendors answers because they aren't good at security either.
Are you confident you know what a good answer to 'how do you push code to production' looks like?
- jacobian 6y agoI tried to get at that in the "who this is for" section: > [This assumes that] you have a security person (or team) who can evaluate the answers and is part of the decision-making process. If nobody’s going to read the answers, don’t waste your vendor’s time. So yeah, totally agree. If you can't adequately evaluate the answers, it's not worth anyone's time to ask 'em.
- count 6y agoI missed that line, sorry!