This is a pretty cool article. The key point as I understand it is that the bank is ISO 27001 Certified, but doesn't have testers, source control or a list of b

This is a pretty cool article. The key point as I understand it is that the bank is ISO 27001 Certified, but doesn't have testers, source control or a list of bugs. (The rest of the Joel test isn't as big a deal, but these are kind of big ones that indicate cowboy coding and not any sort of process at all.)