385
this post was submitted on 04 May 2024
385 points (99.2% liked)
Technology
59148 readers
2260 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
So they are changing team's KPIs to allow for this right? If I was an employee I'd also be fearing that it is going to become impossible to do anything because they won't have the access to systems to do their job.
That kind of irrational fear of implementing good security is a big part of how bad security happens which leads to breaches.
Doing your work securely should be the norm. Each person should have the least privileged access they need to do what they need.
The problem is that if you implement security that is too strict, then employees will find ways around it that are even worse than the more permissive method. I don't disagree that people should have the minimum access required to do their job, but if it isn't proprietary then the controls should be relaxed, and if someone requests access to something it needs to be responded to immediately so they are not delayed in whatever they were trying to do.