3 ms·

At the end of the day, no matter which way you cut it, if you run a project you must be accountable for it, otherwise failure is certain. Even if you choose a 3

At the end of the day, no matter which way you cut it, if you run a project you must be accountable for it, otherwise failure is certain. Even if you choose a 3rd party and get them to sign off on being accountable for delivery, it's you who chose them. It's much better to be explicit. Truly owning the project and being accountable for the outcome means you'll also be more honest with yourself. If there are hardships on the way, and there always are, you must work to figure it out, you can't roll it onto someone else.

chiefalchemist 3y ago
We don't want the risk so we'll farm it out to another entity that ultimately has even less skin in the game. It boggles the mind that someone can make such a decision *and* stick with it. You'd think that at some point they'd come back down to earth.
- jacquesm 3y ago
  This is because often the perception is that it works. Even the GDPR contains some subtle mistakes. In the case of a breach it is the controller that is responsible for reporting the breach to the DPA of the country where they reside, but it is the processor that usually becomes aware of the breach. So processors that don't report breaches to their customers are giving plausible deniability to the controllers they work with that everything was just fine. This is very frustrating because it is obviously not how things are intended to work but that's how less savory characters interpret it and so far they are getting away with it in most cases. The result is a whole slew of breaches being wiped under the carpet.
  - chiefalchemist 3y ago
    > This is because often the perception is that it works. Yes. But how can this idea persist? I mean one of life's basic rules is: No one care more about you than you. To pretend otherwise is silly. At a company level (read: bebolden to shareholders) its borderline negligent. Wishful thinking worked in kindergarten. It's not something working adults should be embracing so strongly. Right?
    - jacquesm 3y ago
      Well, yes, right, but that doesn't seem to stop anybody. I even see this sort of stuff in the boardrooms of companies that should know better. I don't know what drives it, maybe some sense of reinforcement from getting away with similar stuff in the past?

chiefalchemist 3y ago

We don't want the risk so we'll farm it out to another entity that ultimately has even less skin in the game. It boggles the mind that someone can make such a decision *and* stick with it. You'd think that at some point they'd come back down to earth.

jacquesm 3y ago
This is because often the perception is that it works. Even the GDPR contains some subtle mistakes. In the case of a breach it is the controller that is responsible for reporting the breach to the DPA of the country where they reside, but it is the processor that usually becomes aware of the breach. So processors that don't report breaches to their customers are giving plausible deniability to the controllers they work with that everything was just fine. This is very frustrating because it is obviously not how things are intended to work but that's how less savory characters interpret it and so far they are getting away with it in most cases. The result is a whole slew of breaches being wiped under the carpet.
- chiefalchemist 3y ago
  > This is because often the perception is that it works. Yes. But how can this idea persist? I mean one of life's basic rules is: No one care more about you than you. To pretend otherwise is silly. At a company level (read: bebolden to shareholders) its borderline negligent. Wishful thinking worked in kindergarten. It's not something working adults should be embracing so strongly. Right?
  - jacquesm 3y ago
    Well, yes, right, but that doesn't seem to stop anybody. I even see this sort of stuff in the boardrooms of companies that should know better. I don't know what drives it, maybe some sense of reinforcement from getting away with similar stuff in the past?