I'm not logging in as root directly. But non the less with 5 people what audit system would be even available in which only one person has access. All smart concepts cost either a lot of money or just don't work if you…
On a small company with 5 people? Are you serious? What would be your suggestion then?
He suggested that my CEO or CTO would be needed to be called if I needed root access. Like some 4 eye system. They both liked the idea very much that I might need to call them for access to systems I build :D
I prepared so much for our audit and the only thing this guy cared for in a 5 developer company was the fact that I had root access on all environments. He didn't care about Aws having 2fa configured about our vlan…
It might be something similar as it is in software development. At the end of the day it is a job. But when you part of the 1% of the good people you have your team and more leaway and potentially get called for the…
Yes at the end of the day your main job is it to either educate people about always the same security issues, Fixing the same security issues, Or singing of on procedures.
I'm not logging in as root directly. But non the less with 5 people what audit system would be even available in which only one person has access. All smart concepts cost either a lot of money or just don't work if you…
On a small company with 5 people? Are you serious? What would be your suggestion then?
He suggested that my CEO or CTO would be needed to be called if I needed root access. Like some 4 eye system. They both liked the idea very much that I might need to call them for access to systems I build :D
I prepared so much for our audit and the only thing this guy cared for in a 5 developer company was the fact that I had root access on all environments. He didn't care about Aws having 2fa configured about our vlan…
It might be something similar as it is in software development. At the end of the day it is a job. But when you part of the 1% of the good people you have your team and more leaway and potentially get called for the…
Yes at the end of the day your main job is it to either educate people about always the same security issues, Fixing the same security issues, Or singing of on procedures.