4 ms·
Today some auditor (like me) would fail your ITGCs because of the undocumented partition/file/change/etc (take your pick) and force you to submit a deviation to
by HenryBemis 1y ago
Today some auditor (like me) would fail your ITGCs because of the undocumented partition/file/change/etc (take your pick) and force you to submit a deviation to the SOC team, ask you to "review and update the Secure Design Document to reflect to the change", ask you to create a Jira and/or ServiceNow ticket, etc. etc. etc.
Oh, and you would get a red mark on your "HR P&D record" for the 'Secure Software Policy' violation.
(Shit.. I hated myself writing the above, but it's true)
In 2001 though, we would all laugh if we would have 'caught' the devs doing something cool like this!
- ahazred8ta 1y agoYeah, the federal government used to pay extra for versions of Win/9x with the easter eggs taken out.
- echelon 1y agoGross. I hope we do shrink software companies down to the mythical "1-person unicorns" so we can be done with this madness. I prefer the taste of small auteurs to the consensus of product orgs and their politicking. (Add to that whatever design refreshes we are faced with when the designers declare a new design language.)
- FirmwareBurner 1y ago>"HR P&D record" Let HR run your engineering, go broke.
- hinkley 1y agoIP Lawyers are almost as good. Accountants are a dismal third place.
- dgfitz 1y ago> Oh, and you would get a red mark on your "HR P&D record" for the 'Secure Software Policy' violation. What a time to be alive.
- iwontberude 1y agoThat’s just how government work be, no shame.
- xvilka 1y agoMeanwhile real bugs (security issues) would go unnoticed as it often happens.
- hinkley 1y agoThere's a black art to making organizations successful in spite of their best efforts. They will, often enough, find ways to go on being successful without you, but at least you can cart your cardboard box away with a clear conscience. Those same techniques can also be used for mischief, if you prefer.