4 ms·

"JPMorgan hit with $200 million in fines for letting employees use WhatsApp to evade regulators' reach between 2018 and 2020" How did the bureaucracy let this

"JPMorgan hit with $200 million in fines for letting employees use WhatsApp to evade regulators' reach between 2018 and 2020" How did the bureaucracy let this happen if it's as big and bureaucratic as you claim? And there's other examples too.

deleted 3y ago
[deleted]
Supermancho 3y ago
Some executives going on WhatsApp to collude is going to be possible to this day, as long as the highest ranked member(s) ok it and there's no paper trail. It's not much different from after-work drinks, but they left records and got caught. shrug That's a different kind of corruption than what I was addressing, which does not involve technical operation. Not to brag, but I skirted company policies at JPMC. I had been tasked with writing a solution for a specific process that integrated a freeform type of data. I didn't use customer data or even sensitive company information, but did cobble something together that worked as a prototype over 6 months, in addition to my application workload. Due to some unannounced hardware refresh, my laptop was to be wiped. I decided to mail a zipfile of the custom javascript code (all open source or hand-written), to myself. There was a proper application (OneDrive) to normally store this kind of data, but it wasn't on my machine...which was probably part of the reason some laptops were being nuked. So, against, company policy I "mishandled source code" and got a 2-week-long wrist-slap over it. Was this "letting employees use email to evade company policies", or is it simply something that happens because there's no practical way to prevent me from doing it and still maintain standard business operation? It's important to read between the lines sometimes. Anything that requires participation of lower level employees, is different because they have to have explicit instructions and action plans to do anything...according to multiple policies and processes. If someone walked in and said "this is the SQL to use to delete this data for this JIRA ticket", it would be written down in a Confluence, JIRA, email, git, for starters. You would also have to have to account for the rollback as well, or it doesn't play.

deleted 3y ago

[deleted]

Supermancho 3y ago

Some executives going on WhatsApp to collude is going to be possible to this day, as long as the highest ranked member(s) ok it and there's no paper trail. It's not much different from after-work drinks, but they left records and got caught. shrug That's a different kind of corruption than what I was addressing, which does not involve technical operation. Not to brag, but I skirted company policies at JPMC. I had been tasked with writing a solution for a specific process that integrated a freeform type of data. I didn't use customer data or even sensitive company information, but did cobble something together that worked as a prototype over 6 months, in addition to my application workload. Due to some unannounced hardware refresh, my laptop was to be wiped. I decided to mail a zipfile of the custom javascript code (all open source or hand-written), to myself. There was a proper application (OneDrive) to normally store this kind of data, but it wasn't on my machine...which was probably part of the reason some laptops were being nuked. So, against, company policy I "mishandled source code" and got a 2-week-long wrist-slap over it. Was this "letting employees use email to evade company policies", or is it simply something that happens because there's no practical way to prevent me from doing it and still maintain standard business operation? It's important to read between the lines sometimes. Anything that requires participation of lower level employees, is different because they have to have explicit instructions and action plans to do anything...according to multiple policies and processes. If someone walked in and said "this is the SQL to use to delete this data for this JIRA ticket", it would be written down in a Confluence, JIRA, email, git, for starters. You would also have to have to account for the rollback as well, or it doesn't play.