4 ms·
Missing is fraud, auditors, regulators, lawsuits etc which seem to rule big orgs and small companies largely ignore.
by zz865 5y ago
Missing is fraud, auditors, regulators, lawsuits etc which seem to rule big orgs and small companies largely ignore.
- datavirtue 5y agoI landed in a great startup (lucky me) where the IT infra manager had an entire fake environment for the PCI auditors. So many laughs. They hired a info sec manager eventually, who wrote stacks of policies and put us through numerous successful and legit PCI audits...but yeah, that was one example of the regulations being skirted. There was a constant barrage of legal issues though that consumed three in-house lawyers.
- larsrc 5y agoAlso having to deal with the differences between different markets, internationalisation, auditing required at larger size, greater reliability requirements, etc. And over time, the first designs will turn out to have problems, so you have to rewrite/replace/refactor, which may end up having multiple systems running in parallel for a long time. Complexity accretes.