Re:Flush times for hackers in booming cyber security job market
by jacquesm on Friday July 28, 2017 @11:15AM
(#14874823)
It's simply bad practice to have the people that are involved in the 'checking' making money or being involved in the 'fixing' in any way shape or form.
You'll see this in almost every situation that is somehow related to auditing.
If they make up a bunch of minor things that don't matter, you can ignore those and focus on the important ones. I suppose if you don't have any in-house expertise at all to evaluate what they say, the conflict would be more important?