Sophie Schmieg@sophieschmieg@infosec.exchange
Team: what policy is that?
Me: one second
Me type type type
Me: this policy
Sophie Schmieg@sophieschmieg@infosec.exchange
Royce Williams@tychotithonus@infosec.exchange
@sophieschmieg@infosec.exchange We also have a "security team's requirements idiosyncratic to any specific solution or deployment also have the force of policy" blanket rider. (We don't swing this hammer around indiscriminately, though - don't want to dilute its power)