4 ms·
Wonder how this headline and article jives with Azure achieving FedRAMP statuses, DoD IL5, and other security certifications? If Azure is as bad as this articl
by warrenm 3y ago
Wonder how this headline and article jives with Azure achieving FedRAMP statuses, DoD IL5, and other security certifications?
If Azure is as bad as this article makes them sound, does that mean most major security certifications are also as pointless they look from the outside? Like the pointless ISO 9001 certification - which only states "we have a process; here's the process; we follow the process; we don't deviate from the process"?
- yencabulator 3y agoAs someone who's worked on obtaining Common Criteria and FIPS certifications, I fully believe security certifications have little to do with security. Especially if you don't carefully read the definition of Security Target therein; that part is very much like the arbitrary process in your ISO 9001 mention.