Hacker News Reader

Maybe we need certifications for systems along with audits that would allow us to rate companies like this.

I know for our company to do work with DOD we had to meet a bunch of criteria and make changes to our systems to comply. But it wasn't a standardized process at all.

View on HN

Nobody is objecting oversight, inspection and certification when in comes to physical infrastructure like bridges, tunnels, etc. I think we reached the point when critical software infrastructure and services should be treated the same way. Are there lessons to be learned from how they do it for DOD?

Reply on news.ycombinator.com