Conversation

Notices

1. Viss (viss@mastodon.social)'s status on Friday, 29-Mar-2024 05:37:11 UTC Viss

   food for thought:

   zero commercial airline pilot pre-flight checklists covered things like "missing bolts causing the plane to depresurize" and "the wheels keep falling off".

   computer security works in very much the same way - "compliance" is that preflight checklist. its a bunch of checkboxes you should look at before flying (and the FAA will essentially force you to because its the rules)

   but it ABSOLUTELY does not cover everything, and MANY THINGS WILL KILL YOU that arent on the checklist.

   • Santa Claes 🇸🇪🇭🇰🎅 likes this.
   • mkb (mkb@mastodon.social)'s status on Friday, 29-Mar-2024 05:37:14 UTC mkb

     in reply to

     @Viss @paco The way I explain it to clients is we can tick every compliance box and still do a poor job managing risk. If we do a good job managing risk then compliance gets easy.

     Santa Claes 🇸🇪🇭🇰🎅 likes this.
   • R. L. Dane (rl_dane@fosstodon.org)'s status on Friday, 29-Mar-2024 05:37:17 UTC R. L. Dane

     in reply to

     @Viss

     "This plane was designed by an overpaid baboon and assembled with milk cartons and duct tape. Make sure you follow the checklist so everyone knows its safe."

     If that isn't #infosec and #SoftwareEngineerimg in a nutshell, I don't know what is.

     Santa Claes 🇸🇪🇭🇰🎅 likes this.