@gmassen @quinn
Interesting thoughts, tnx.

Where I work, we endure an audit every year, for some certification I don't remember the name/number of. But basically, we have to prove that we have documented procedures in place, & that we have safeguards in place to force us to follow said procedures.

What steps need to be followed to get code from Dev to QA to Prod.

Our customers don't see our audits, but they know what our certification means.

@gmassen the thing is those disqualified shiny projects are legally and contractually required for compliance regulations, while not being legally open to customers.

@quinn @gmassen I definitely understand why it happened, IT staff have been minimized, disrespected, and ignored for years, prevented from budgeting critical needs, etc. Turning it all into a subscription means someone else raises the prices, someone else staffs the problems, etc.

But centralizing it on a bunch of companies heavily motivated to raise their own profits instead of protecting yours is going to lead to a lot of ruin.

@quinn @ocdtrekkie In quite a few cases I’d suspect the outsourcing has become way more expensive than decent IT staff. The way back has become near impossible. And compliance is part of it. But I still hold infrastructure to a different standard than a school district, in terms of understanding and being in control of the core systems. It is also the only way I can see to prevent large-scale failures: limiting impact of concentration.