RootWyrm 🇺🇦:progress: on Nostr: oh, that's the worst part. None of my findings were debatable, because security and I ...

oh, that's the worst part. None of my findings were debatable, because security and I were always in perfect sync. (Miss the hell out of that team.) We teamed up on justifications both for "not doing DISA-STIG" and "no random shit off the Internet." So there was no 'my manager said.' If you wanted a variance or risk acceptance, you had to go about 2 levels short of board approval. AKA not our problem.

Without that? 100+ hours. Easy.