Hacker News Reader

What did he suggest as a mitigation? or isn't that part of an audit?

He suggested that my CEO or CTO would be needed to be called if I needed root access.

Like some 4 eye system.

They both liked the idea very much that I might need to call them for access to systems I build :D