4 ms·
We can’t do this in the industry I work in. We’re subject to regulatory compliance requirements like SOC2, FedRamp, and CJIS. If an auditor found that access to
by cebert 2y ago
We can’t do this in the industry I work in. We’re subject to regulatory compliance requirements like SOC2, FedRamp, and CJIS. If an auditor found that access to production databases wasn’t limited on a per-need basis and that access was audited, we’d face significant consequences.
- lunarcave 2y agoFair. But my intuition is that people do it until they get restricted by compliance, after which they seem to invest in a proper setup.