When some new version of log4j comes about and everyone is scrambling to find out where it resides, the cybersecurity team is going to hate the crappy checkbox solution that doesn't actually work.
Which is pretty much the norm.
Which is pretty much the norm.
Nobody cares, it's just another checkbox/policy. Security team is just another compliance department. It does not bring in money.
This. Thanks for highlight it!