4 ms·
As annoying as it can be for individuals, companies have a limited amount of resources that they can dedicate to ensuring compliance with IT security policies.
by facorreia 4y ago
As annoying as it can be for individuals, companies have a limited amount of resources that they can dedicate to ensuring compliance with IT security policies. Browsers in particular, since they run arbitrary code, require dedicated policies. Keeping track of vulnerabilities and making sure that all users are running the approved versions takes time and effort. On the other hand, failing to demonstrate compliance (e.g. during regular audits) can have significant consequences.
My advice: if as part of your role you have business requirements that can only be met with Firefox (like ensuring browser compatibility), then ask your manager to put together an exception request, with a compliance plan (e.g. running Firefox on a sandboxed cloud instance).
If you don't NEED Firefox, but WANT it (e.g. based on personal preferences or individual productivity), it will be hard to make a case for it considering that any productivity gain will be offset by increased compliance costs.
I do not advise circumventing company policy since that puts the company itself in jeopardy by potentially being out of compliance with its security policies.