3 ms·
You are (or should be) if you took no effort to avoid the fraud for something this important. In IT, if you hire a company to handle your SSO, but don’t check t
by skywhopper 2y ago
You are (or should be) if you took no effort to avoid the fraud for something this important. In IT, if you hire a company to handle your SSO, but don’t check that they have the required certifications verified by independent auditors for their own security you may well be on the hook when they expose your customers’ data.
- pylua 2y agoI agree you should be. I don’t think our economic system enforces those checks. In practice auditing and pen testing are just farmed to the lowest cost place that says they will do everything. The system has no proper checks or balances against fraud.