Re:Elon Musk emails employees about 'extensive and damaging ...
by falsedan on Tuesday June 19, 2018 @06:10AM
(#17345222)
The you say in your compliance policy that you run regular audits for these kinds of actions and remediate them on a case-by-case basis.
E.g. run quarterly reports for changes to prod that didn't go through the regular release pipeline and note down which P0 they corresponded to.
What if the employee were a sysadmin-level person that sidestepped the normal process?