Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I have been in these audits and nowhere does it say that software has to be 'auto updated', this is a ridiculous statement and requirement.

What a proper audit will look for is a update and testing control with supporting evidence.



Sounds like your employer has better auditing processes than most places.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: