@swissky thanks for cross posting. I keep forgeting to check this channel

@Ichinin @oruth I see this as security theatre. It could be on purpose or done out of ignorance. Leadership is given advice from so many people, and they know that a company is judged by its state of compliance. It’s safe to follow compliance. The problem comes from the quality of advice. I tend to ask the question, will a change impact the threat’s ability to succeed? The answer should come from a team who actually knows what it takes for a threat to succeed. In the end, it is the orgs decision how to play in their playground. It’s not fun, but can’t let that stress you out

@Tjnull sounds like fun