Yeah, by definition. Someone who has more knowledge in a subject is more reliable than someone who doesn't.
197 karma · joined June 13, 2020
Yeah, by definition. Someone who has more knowledge in a subject is more reliable than someone who doesn't.
Why do you have an issue with a non-expert clarifying that he's not an expert? I prefer people call out their own ignorance as apposed to implying expertise they don't have.
Edit: Sorry, let me specify. I'm tired of this being a Texas-only political issue. I agree that politics are at play but this isn't localized specifically to Texas' grid.
What we really need to be reminded of is that this was caused by global warming stifling the typical northern jetstream. As long as global warming stays a problem, we will need to anticipate these types of extremes across the entire US.
Which really isn't fair since Texas has a massive number of democratic voters. We have multiple large metropolitan areas but we also have massive rural regions that tend to outweigh when it comes time to vote.
As a Texan, I agree that the situation is more nuanced than what's being presented on the news, social media, and on HN. It's important to look at the policies in place to fully understand what could have been done to prevent the current problems.
I spend maybe half of my time working alongside developers to define security controls that need to be added, verifying they were implemented, and testing production. I do this because I realized when reading The Phoenix Project that the only way for security to be taken seriously by a company, I have to have an integral hand in the SDLC. Ironically enough, by defining the security controls that must be put into scope this early in the process, I also am able to make sure our software maintains compliance. This experience will be very different for a company that has more technical debt then we do, keep in mind.
I spend maybe 10% of my time on compliance. However, this is because we've already achieved our benchmarks; I only focus on determining violations, remediation, and making sure the company is ready for the next audit. Like I said, we have little technical debt and I work tirelessly to make sure security controls have been identified before the scrum starts. Back when I was working to get us to this point, I spent perhaps 90% of my time learning about the compliance benchmarks we needed to achieve and when needed to happen for us to get there.
1. About 10% of our processes were defined and documented
2. Most of the time however they were not enforces
3. I think, like most things in life, there is a healthy balance between the two extremes. I think major functions like deployments, SDLC, incident management, and project life-cycles, should be documented but the auxiliary things should have lots of freedom. I think that regardless of the amount of established processes, a startup should be able and willing to adjust them as soon as a better process is established.