2 ms·
at some point the regulator is going to realise running everything on Azure is a planet sized concentration risk hopefully before everything has decamped
by blibble 2y ago
at some point the regulator is going to realise running everything on Azure is a planet sized concentration risk
hopefully before everything has decamped
- bobbiechen 2y agoSome regulators already know this - for example, EU's Digital Operational Resilience Act (DORA) requires identifying critical service providers like the public cloud providers and ensuring an exit plan. Azure would certainly be in scope for many institutions. The UK PRA and Singapore's MAS have similar guidance. Often these are related to third-party risk management and/or outsourcing.
- chrisjj 2y agoAzure (cloud) mitigation is one thing. Workstation (Crowdstrike) is a much bigger challenge. How do you switch thousands of off-net machines away from a broken Crowdstrike? User-run USB stick recovery? But then how would you meanwhile keep those sticks up-to-date?