@calamari we need better checkboxes for auditing how good the audit checkboxes are

@calamari
I Like this, but it's not nearly unkind enough to folks who just do not engage brain at work, at all.

Compliance is meant to be a tool, to expose businesses to robust thinking around problems. IMO anyone, who knowingly does check-box compliance, (we'll just buy in / defer compliance) for any reason, should be shown the door.

@calamari At Amazon in 2019 I argued against the Falcon sensor on the hosts I was responsible for. I agreed their service was good, but the lack of transparency, control and even ability to test changes made it a no go for me. I asked why we weren't either building our own solution or just buying them.

I was overruled and I'm sure those systems, if they still exist, had a fun past few days.

Again, I like CS, but major tech companies are not short on resources or expertise.