3 ms·

can you please name the standard in question? also, it's completely okay if no code had to be changed also there are quality assurance and process related sta

by pas 3y ago

can you please name the standard in question? also, it's completely okay if no code had to be changed also there are quality assurance and process related standards, that are about documentation... and let's not forget that a government can usually require that the vendor sign paperwork, which makes sure the officers of the vendor are criminally liable ... I'm not in favor of them, nor in favor of spending millions on legal and documentation fees, but without knowing more it's yet another "public procurement bad" story (which is completely believable! I mean 1M EUR compliance cost nowadays is not that unusual)

wazoox 3y ago
It was in 2016 so I mercifully forgot the details, it's a set of standards for data archival and document classification. There are some compliances rules for security in the mix (people should require proper authorisations to access documents, etc). At some point some lawmakers (under the influence of some company such as Cap Gemini or Atos) passed a law to force notaries to use only software with that particular stamp. The problem is that it's typically the sort of standard that should be applied to a particular organisation and workflow, through an auditing process, instead of a global, upfront stamp that is really a way to do gatekeeping, not actually enforcing data safety and security.