6 ms·
Nah. I’m gonna name some names. I had a client in the compliance space - they handle detailed product information for Apple, Boeing, BAE systems, Philips, Siem
by madaxe_again 7mo ago
Nah. I’m gonna name some names.
I had a client in the compliance space - they handle detailed product information for Apple, Boeing, BAE systems, Philips, Siemens - you know, nothing important, just literally classified material and incredibly sensitive corporate material.
Anyway. We did ISO27001. We did it well, audited by Lloyds register, reputable stuff all the way down. Built actual meaningful processes.
Anyway, a massive PE entity bought them in a hostile takeover, fired everybody, binned the ISMS, moved to some “compliance” goons.
I saw the box ticking chicanery as it happened - as after firing everyone they of course didn’t follow the off boarding process, so I retained full access to their JIRA. I only lost access a year later when atlassian terminated the account for non-payment.
Nobody actually gives a shit, about anything.
- otterley 7mo agoUntil someone rich and powerful gets ripped off -- then, suddenly, lots of people care a lot.
- orochimaaru 7mo agoYeah - probably. Didn’t Microsoft have Chinese engineers work classified government stuff? I guess if you have the muscle to brush off legal action from the govt you’re ok. If you’re an unsuspecting startup - that could be a problem.
- nerdsniper 7mo ago> I’m gonna name some names. *Doesn’t name any names.* Not that I want you to, I feel it would open you up to libel exposure. But can we both acknowledge that you didn’t name the entity that coasted through their audit?
- madaxe_again 7mo agoI did, and then I thought twice. Let’s say it’s a synonym for a piece of non-reflective geology.
- zoklet-enjoyer 7mo agoI always think of obsidian when I see their name and that's reflective
- itsankur 7mo agopretty sure he means blackstone or blackrock
- seabass-salmon 7mo agoI'd have guessed Iron Mountain
- zoklet-enjoyer 7mo agoIron Mountain is publicly traded
- zoklet-enjoyer 7mo agoYes. Like reflective obsidian
- pas 7mo agoBlackstone is the PE blackrock is the asset manager though I'm not saying it couldn't have been the latter
- badc0ffee 7mo agoHe didn't say when he was gonna name some names.
- azan_ 7mo agoHe technically did name many names: > Apple, Boeing, BAE systems, Philips, Siemens
- Ucalegon 7mo ago>Nobody actually gives a shit, about anything. That's the case until there is the threat of discovery. The real issue is if the PE firm bought the company for the value of the IP and any damages awarded was included in the 'cost of business', which is why liability needs to be extended to those persons who make that decision, not just the corporate entity.