I'm looking for advice from people who have experience with both US federal software environments and Whole Team Development, ensemble programming, or mob programming in that setting. I'm…
My manager wants to cancel our ticketing system and route all internal IT requests through one shared WhatsApp Business group to reduce costs. We're a team of four…
I'm designing storage and network infrastructure for a court reporting agency that handles sensitive transcripts, audio recordings, protected health information, and legal work product. The proposed NAS would…
I'm evaluating a one-time-secret tool for use in a highly regulated environment. The tools I've reviewed don't appear to store the actual secret in their databases. Instead, they…
I'm evaluating a one-time-secret service for use in a highly regulated environment. The tools I've reviewed appear to avoid storing the actual secret in their databases and instead…
I'm covering DBA, architecture, software engineering, SRE, and sysadmin responsibilities at a small but fast-growing company. We're starting to use an international, mixed team and may outsource database…
Our organization is looking for a replacement for Backup Exec, which is being discontinued. We previously used Veeam, but it was removed after being judged unsuitable for our…
We're considering using Freshservice from Freshworks, but our compliance team is concerned because Freshworks says it does not carry Errors & Omissions or Professional Liability Insurance. They do…
I've maintained a self-managed GitLab instance for about three years, mainly because our compliance team would not approve cloud hosting when we originally set it up. Recently, though,…
We acquired a roughly 30-person company about nine months ago, but the technical integration is still incomplete. Our SOC 2 audit is scheduled in about four weeks, and…
We're evaluating self-hosted low-code and internal application platforms for compliance-heavy environments. The key requirements are fine-grained RBAC, detailed audit logging, enterprise access controls, Docker or Kubernetes deployment, and…
I'm running a setup where we use Intune's assigned access to turn our laptops and mini-PCs into hardened thin clients through the autopilot process with zero-touch enrollment. Lately,…
I'm trying to get a sense of how much time really goes into filling out vendor security questionnaires. From my experience and from talking to other founders, it…
I'm currently working as a DevOps engineer under a new IT management team at a company where I previously ran the IT department. However, I'm facing significant challenges…
What should I consider when sending customer personally identifiable information (PII) to LLMs hosted on Bedrock? Are enterprises generally comfortable with this practice, and does using such information…
I recently encountered a troubling situation where a user fell victim to a phishing attack involving Evilginx. They entered their credentials and completed MFA, but luckily we have…
I'm tasked with creating a cohesive cloud strategy across various business units and regional teams, but it's a daunting challenge. Our organization is dealing with legacy systems, technical…
I've been chatting with a lot of developers across Europe and companies that aim to sell products in the EU. A common trend I'm seeing is that compliance…
Hey everyone! I recently received a notice about migrating our VM source images to the new Azure Marketplace Windows Server 2022 images, but I'm curious about what will…
Our company has been acquired by another firm, and due to security protocols, we can't merge accounts or transfer data like usual. Instead, we've created new accounts under…