4 ms·
> There is no compliance reason why OP couldn't have read access to look at the source. Companies can have whatever compliance terms they like, whether they ma
by staticassertion 5y ago
> There is no compliance reason why OP couldn't have read access to look at the source.
Companies can have whatever compliance terms they like, whether they map to ISO27001 controls or not.
> Any organization that uses compliance as an excuse for opaqueness, creating silos, and guarding projects like treasure is toxic, especially if people there are so institutionalized that they think that's a valid reason, and OP should begin looking for another job ASAP.
Or they believe it's a reasonable control. Let's imagine this is a company working on self driving cars. Your source code is probably something you want to protect very carefully.