On Wed, 23 Jun 2021, Robinson, Herbie wrote: > The problem is that the people who invented security audits never > remove anything from the list of things they will ding you with… If > you are getting paid to pass all of these benchmarks, you have keep > everything around forever. Yeah, procrustean auditors can be a hassle, but the magic words "equivalent security control" can solve a lot of audit-related problems. -d _______________________________________________ openssh-unix-dev mailing list openssh-unix-dev@xxxxxxxxxxx https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev
