Can you really get fired because your coworker deleted an important file? It wasn’t your fault, but here’s the catch: He claims it was you. What do you do? GO!
Thanks Erich for another excellent post. Thanks also for highlighting the importance of auditing. This is something that also gets completely overlooked sometimes in qualitative research, but without that, basically, how can we have any reliability on the work that we've done? Thanks again for this insightful post.
Well, having good policies is one thing, but we can’t rely on people being honest. If there’s no way to prove that a policy was violated, then it eventually becomes a joke.
Thanks Erich for another excellent post. Thanks also for highlighting the importance of auditing. This is something that also gets completely overlooked sometimes in qualitative research, but without that, basically, how can we have any reliability on the work that we've done? Thanks again for this insightful post.
Thank you, Sam. I appreciate your comment!
Well, having good policies is one thing, but we can’t rely on people being honest. If there’s no way to prove that a policy was violated, then it eventually becomes a joke.
AAA remains foundational. But AAA answers who can access a system, not whether a specific action should be allowed to execute.
An authenticated and authorized account can still encrypt data, exfiltrate records, or destroy business operations.
Accounting tells us who did it afterward.
The unanswered question is: what intervenes when a legitimate account starts doing the wrong thing in real time?