I know. That’s why I have to ask the question. On the face of it it’s such a bad decision, I’d like to give someone a chance to answer. There’s a point at which I wonder if a diligent CISO shouldn’t be required to mitigate this. I also wonder if it violates the consent decree.
♥ 1