>"give me a test harness for user profiles" "give me a secure login process" "give me a SSO service" > Internal support portals for enterprise passwords? Dumb

>"give me a test harness for user profiles" "give me a secure login process" "give me a SSO service" > Internal support portals for enterprise passwords? Dumb password rotation rules, 6-8 character limits, and chrome complaining about obsolete ssl suite usages. I'm curious as to why these would require some outside security group to deal with? These all seem like issues that should be solved either by someone in the devops category. Update your dependencies, disable unused protocols, have a QA guy find your improper memory glitches, and now 99% of the security establishment is irrelevant to you. These are operational issues. Most security issues are just operational issues.