News for hackers. Stuff that matters.
Re:Epic Tells Customers It Will Stop Google Cloud Integrations by o-__-o on Monday January 20, 2020 @09:23PM (#22103829)
If you work for a company that must follow regulations, then you should be aware of your impact. You will learn this as you advance further in your career.. however this post was written as though the regulations are there to cause you grief, but that can't be further from the truth. Think of it like this, the Boeing team is finding out the hard way what happens when you skirt steps in a highly regulated field.

SOX is the standard for change management for financial companies to prevent shadow changes that could enable another Enron, Worldcom, or Adelphia style cooking-of-books financial scandal. The idea is that all changes should be fully analyzed for their impact. If a change is found to have been made without going through the controls process then a review and an emergency after-the-fact change record must be created. This leads me to believe you did not just login to a server, unless you weren't supposed to have access in the first place (separation of duties requirement), but actually made a modification to that server without an approved change.

All this means that the system is very resilient and will not suffer random outages but most importantly, in the SOX world, there is no avenue for malicious changes to be introduced to critical financial systems and their data.

Re:Epic Tells Customers It Will Stop Google Cloud Integrations by closeparen on Monday January 20, 2020 @09:42PM (#22103909)
If you’ve never encountered a brain-dead compliance process, you’ve had an extraordinarily lucky career.

Even good and thoughtful regulations get interpreted into nonsensical bureaucratic nightmares by some companies’ compliance departments. The implementations that add disproportionate friction usually don’t achieve the intended benefit either. It’s not people choosing a convenience vs. safety tradeoff. It’s just people who don’t understand the subject matter at all.

Re:Epic Tells Customers It Will Stop Google Cloud Integrations by Reelin on Monday January 20, 2020 @10:11PM (#22104011)
Having worked in a lab environment heavily subject to OSHA regulation, I think you are both correct. I've been personally subjected to brain-dead interpretations on multiple occasions, but I'm also absolutely certain that in the absence of any regulation the environment would have been absurdly dangerous. On the balance, I'll favor the regulation.