3 ms·
Genuine question: do advisories like this ever directly result in action being taken? Do they carry weight with stakeholders? (looking for real-world anecdotes
by brundolf 3y ago
Genuine question: do advisories like this ever directly result in action being taken? Do they carry weight with stakeholders?
(looking for real-world anecdotes, not preexisting assumptions)
- westurner 3y agoThis guideline is in accordance with other guidelines, and that guides the teaching of theory and practice.
- fusslo 3y agoAnecdotally, I've seen them used in tech security org presentations to execs. Usually when asking for more resources (employees, money, audits, etc).
- barryrandall 3y agoIt creates a record of ignored warnings that can then be cited as justification for regulatory intervention. At this point, I think something onerous is inevitable.