4 ms·
Security unfortunately is a creative process, which is hard to get consistent. I would love to use something like statistical product control, but I have yet to
by extrapickles 5y ago
Security unfortunately is a creative process, which is hard to get consistent. I would love to use something like statistical product control, but I have yet to see a good way to apply it (or similar techniques) without forcing pen-tests to be “follow the checklist”.
- extrapickles 5y agoI should add that burnout is a massive problem when it comes to quality. Even if you found a good consultant (or group of), for round #2, they could have just finished testing all of your competitors products and are now worn out. Scheduling in variety to try and prevent partial burnout is difficult if everyone in a vertical only wants to use the same person.