3 ms·
If someone can ignore the governance process then it’s not an effective governance process. If there’s not auditing to identify when someone bypasses governanc
by prepend 6y ago
If someone can ignore the governance process then it’s not an effective governance process.
If there’s not auditing to identify when someone bypasses governance, then that’s not effective auditing.
Assuming effective controls are in place without any description of them and evidence that they fail is foolish, I think.
Reddit could have shown off their governance and audit process, but didn’t. I’ve worked on similar systems where someone can just edit the db records and there have been places with no and decent governance. It’s more likely that anyone with admin rights can change stuff. This is bad for a company as big as Reddit with as many users.