3 ms·
An organization trying to maintain an ISO certification will have drastically different policies and controls than a small shop, or even a hobbyist group. Ever
by hosh 3y ago
An organization trying to maintain an ISO certification will have drastically different policies and controls than a small shop, or even a hobbyist group.
Everyone (theoretically) would be complying to statues in its broadest sense, but jurisdiction, regulations, industry best practices, reporting requirements, and appetite for risk is going to be different from organization to organization. It’s not one-size-fits-all.
So some of these things are eliminated because the people hosting those are not put under the same kind of scrutiny as say, a Twitter.
- jeremyjh 3y agoThe scrutiny from investors, legal and compliance exists because the risks are real, and they don't go away just because there isn't a Serious Business involved. Once someone operating one of these is publicly damaged, the risk will be better understood and marked up accordingly.