If only the victims of this attack had asked their vendors to fill out spreadsheets with hundreds of rows and multiples tabs detailing their internal controls. This all could have been avoided... right?
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
omg PLEASE
-
“someone else in the org owned the risk”
End of conversation
New conversation -
-
-
if the vendor was being honest about code review, and code security. If is a very big word. Most vendors don't do a good job with either code review or code security, and lie through their teeth about it.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Exactly, compliance equals real security. 80-20 rule is what compliance truly addresses. Unfortunately, doesn't really work in real world defense.
-
WWII-bomber-bullet-pattern.gif
- Show replies
New conversation -
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
More questions = more security, no? ;)
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
“You guarantee that you are not the target or victim of an apex nation-state campaign designed to compromise hundreds of organizations via upstream supply chain hijacking”
Yes -
Solved...
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.