3 ms·

By forcing Configuration Management Software (puppet, cfengine) so that one-off fixes that get hot patched on the production server and never documented.

• count 15y ago
  This goes a very long way to helping, yes, but by itself does not guarantee anything. And not everything can be cfengined or puppeted.