[–] 3 points 3 weeks ago (1 child)

Complicate requirement are kind of out of date. They keep adding requirements to them but then don't often take them away. So if a requiment made sense 20 years ago it's still there even though there are better strategies to protect your environment.

You could skip a requiment if you can establish a compensatinh control and show that the threat the requirements is intended to address is addressed. For example skipping antivirus by reimagining the devices every morning, this is an absurd example but would work.

  • source
  • parent
  • context
  • [–] 0 points 3 weeks ago

    No IT Auditor ever tests this, the just ask and if you say yes they move on. To actually test this you would have to statically sample a random sample of devices and confirm the antivirus is installed.

    Instead that auditors are going to ask for a list off devices enrolled in the antivirus and a list of all devices (if the company even has an asset inventory) and see if they look right. But, most like the asset list will come from the antivirus enrollment and it won't matter.

  • source
  • parent
  • context
  • [–] 4 points 1 month ago (1 child)

    More than likely what was signed was not a legal document just something to be used for a reference when forging the signatures. And, if they are willing to forge all the legal paperwork they are probably willing to forge the notary too.

  • source
  • parent
  • context
  • [–] 24 points 1 month ago (5 children)

    They are not. They are purpose built systems that leverage specialized knowledge.

    The problem is you have people asking LLMs to find a cure for cancer and have no way of knowing if the output is any good. Then those people start emailing everyone saying they cured cancer.

  • source
  • parent
  • context
  • [–] 5 points 1 month ago (4 children)

    My strategy is usually to ask them questions that challenge their assumptions. Studies have shown this to be the best way to get someone to change there mind. However, most of the time they stop replying before I can gage if they have changed their mind or not. I assume that my questions make them uncomfortable so they stop engaging instead of evaluating their opinions.

  • source
  •  

    I am attending a webinar in a few days, and to get credit for attending I need to participate in the pulling questions. The application is Zoom, and I do not know when or how many pulling questions there will be. Does anyone know of a way to auto respond to the pulling questions? I have time, and am totally willing to slap something together in python, so if you have an idea of where to start that would be amazing

    view more: next ›