2 ms·
The phobia sounds like a feature, not a bug. But could you explain more of what you mean by, > Having conducted risk assessments and threat analysis myself for
by euroderf 4y ago
The phobia sounds like a feature, not a bug. But could you explain more of what you mean by,
> Having conducted risk assessments and threat analysis myself for various companies with a global presence, I was most intrigued by this phenomenon in the EU as it was mostly not driven by technical accuracy.
- leftcenterright 4y agoA risk assessment and threat analysis typically requires a definition of who the adversary is and what the risk of using any service is in regard to that adversary. Reasons I heard for a lot of companies to not use GCP/AWS/Github simply were: It is a US company, it will be very easy for CIA to retrieve that data (https://en.wikipedia.org/wiki/CLOUD_Act https://en.wikipedia.org/wiki/CLOUD_Act) or poison the service, let's use XYZ local provider. And the ironic thing is that these local providers had either a terrible reliability record or poor security posture so a mildly competent mediocre hacker would be able to compromise the data which is being defended against CIA. Not once in tens of engagements I came across a calculated measure of defending against nation-state vs run-of-the-mill malware.